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Foreword 


Dominating  the  information  spectrum  is  as  critical  to 
conflict  now  as  controlling  air  and  space,  or  as  occupy¬ 
ing  land  was  in  the  past.  .  .  .  Whoever  has  the  ability 
to  gain,  defend,  exploit,  and  attack  information,  and 
deny  the  same  capabilities  to  an  opponent,  has  a  dis¬ 
tinct  strategic  advantage. 

— Air  Force  Doctrine  Document  1-1 
Air  Force  Basic  Doctrine 

In  this  compelling  study,  Lt  Col  Carla  D.  Bass  argues 
that  the  American  military,  underestimating  vulnerabilities 
of  the  US  information  infrastructure,  has  based  its  strate¬ 
gic  policy  not  on  a  firm  foundation,  but  rather  has  built 
castles  on  sand.  Such  documents  as  Joint  Vision  2010  and 
United  States  Air  Force  Global  Engagement  assume  the 
United  States  will  have  unimpeded  access  to  information 
on  our  own  forces  and  on  the  enemy’s  forces  as  well,  due 
largely  to  our  technological  sophistication.  They  propose 
application  of  a  downsized  US  militaiy  in  a  still  very  deadly 
world,  based  on  the  premise  of  information  superiority. 
However,  the  United  States  will  not  achieve  information 
superiority  until  we  first  attain  information  assurance  by 
securing  our  own  information  systems.  Indeed,  the  De¬ 
fense  Science  Board  cited  this  point  most  eloquently  in  its 
report  delivered  to  the  secretary  of  defense  in  November 
1996. 

Lieutenant  Colonel  Bass  believes  that  the  United  States 
cannot  simply  postulate  doctrine  and  tactics  which  rely  so 
extensively  on  information  and  information  technology 
without  comparable  attention  to  information  and  informa¬ 
tion  systems  protection  and  assurance.  As  outlined  by  the 
Defense  Science  Board  in  its  Task  Force  on  Information 
Warfare-Defense,  this  attention,  backed  up  with  sufficient 
resources,  is  the  only  way  the  Department  of  Defense 
(DOD)  can  ensure  adequate  protection  of  our  forces  in  the 
face  of  the  inevitable  information  war. 

This  paper  postulates  that  the  information  operations 
(IO)  mission  should  be  centralized  at  the  unified  command 
level,  specifically  Atlantic  Command  (ACOM),  to  capture 
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the  plethora  of  uncoordinated,  IO-related  activities  ongoing 
throughout  DOD.  Using  Special  Operations  Command 
(SOCOM)  as  a  model,  ACOM  would  assign  teams  to  com¬ 
batant  commands  to  help  plan  and  execute  information 
operations  missions.  ACOM  should  be  allocated  a  program 
element  (PE)  for  information  operations,  paralleling  SO- 
COM’s  major  force  program  1 1 .  This  would  alleviate  a  ma¬ 
jor  criticism  identified  in  several  national-level  studies  re¬ 
garding  insufficient,  sporadic,  and  uncoordinated  IO 
expenditures.  Establishing  an  information  operations  PE 
would  also  minimize  the  conflict  with  conventionally 
minded  elements  of  DOD  that  resist  realigning  kinetic  re¬ 
sources  to  fund  IO  initiatives,  another  problem  identified 
at  the  national  level.  Designated  as  commander  in  chief  for 
information  operations  and  armed  with  an  information-op¬ 
eration  program  element,  ACOM  could  lead  the  way  for 
DOD  to  attain  information  assurance,  thus  establishing  a 
firmer  foundation  for  US  strategic 
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And  What,  Pray  Tell, 

Is  Information  Operations? 


In  preparations  for  national  defense  we  have  to  follow  an 
entirely  new  course  because  the  character  of  future  wars 
is  going  to  be  entirely  different  from  the  character  of  past 
wars  .  .  .  we  had  better  get  accustomed  to  this  idea  and 
prepare  ourselves  for  the  new  conflicts  to  come. 

— Giulio  Douhet 
The  New  Form  of  War 


“We  had  better  get  accustomed  to  this  idea  and  prepare 
ourselves  for  new  conflicts  to  come.”  Douhet  was,  of 
course,  referring  to  the  revolution  in  military  affairs  (RMA) 
of  his  time,  the  airplane.  His  philosophy  of  anticipating 
and  preparing  for  advances  in  warfare  applies  equally  well 
today,  especially  in  the  context  of  information  operations 
(IO).  However,  before  we  can  “get  accustomed  to  this  idea,” 
we  must  first  understand  exactly  what  is  IO?  Department 
of  Defense  Directive  (DODD)  S-3600. 1  and  Air  Force  Doc¬ 
trine  Document  (AFDD)  1-1,  Air  Force  Basic  Doctrine,  both 
define  IO  as  “actions  taken  to  affect  adversary  information 
and  information  systems  while  defending  one’s  own  infor¬ 
mation  and  information  systems.”1  Specifically,  IO  consists 
of  operations  security,  psychological  operations  (PSYOP), 
deception,  electronic  warfare  (EW),  physical  destruction, 
and  especially  from  the  United  States  Air  Force  (USAF) 
perspective,  information  attack.  The  concept  of  informa¬ 
tion  attack  in  an  IO  context  spans  the  extreme  from  physi¬ 
cal  destruction,  to  impeding  data  flows,  to  covertly  ma¬ 
nipulating  data  content.  The  goal  of  information  operation 
is  to  obtain  information  superiority  by  employing  some  or 
all  of  these  tools  in  a  given  strategy.  DODD  S-3600. 1  de¬ 
fines  information  superiority  as  “that  degree  of  dominance 
in  the  information  domain  which  permits  the  conduct  of 
operations  without  effective  opposition.”2  IO  tools  may  be 
employed  in  support  of  air-,  land-,  sea-,  or  space-based 
operations,  or  they  may  be  compiled  into  an  IO  campaign 
plan.  The  military  conducts  information  operations 


1 


2  BUILDING  CASTLES  ON  SAND 


throughout  the  conflict  spectrum,  during  all  phases  of  an 
operation,  and  across  the  range  of  military  operations.  In¬ 
formation  warfare  (IW)  is  the  application  of  IO  tools  during 
a  crisis  or  conflict. 

Embroiled  in  a  War  of  Words 

Many  professionals  within  DOD  do  not,  as  yet,  under¬ 
stand  IO.  Sloppy  use  of  terminology  at  the  most  senior 
levels  of  the  DOD  definitely  exacerbates  the  problem. 
When  asked  questions  concerning  IO,  several  senior  lead¬ 
ers  at  the  flag  rank  preface  their  responses  with,  “IO 
means  many  things  to  many  people,”  and  proceed  to  mis¬ 
use  the  term,  badly  skewing  their  answers.  These  individu¬ 
als  miss  a  valuable  opportunity  to  elucidate  on  informa¬ 
tion  operations  and  further  contribute  to  the  confusion. 
Indeed,  services  themselves  generate  frustration  with  the 
plethora  of  service-specific  and  frequently  changing  IO  ter¬ 
minology,  as  illustrated  in  figure  1 ,3 

NETWORK  ASSURANCE 

ELECTRONIC  WARFARE  INFRASTRUCTURE  PROTECT 
COMPUTER  SECURITY 
MILITARY  INFORMATION  ENVIRONMENT 
INFORMATION  ASSURANCE  INTELLIGENCE 

SENSITIVE  UNCLASSIFIED  DATA 

DECEPTION  INFORMATION  OPERATIONS 

COUNTERDEFENSIVE  INFORMATION  WARFARE 
INFORMATION  OPERATIONS 

INFORMATION  SUPERIORITY  PSYCHOLOGICAL  OPERATIONS 
PHYSICAL  DESTRUCTION  NETWORK  VULNERABILITY 

COUNTEROFFENSIVE  INFORMATION  OPERATIONS 

INFORMATION  OPERATIONS  OFFENSIVE 


Figure  1.  Information  Operations  Terms 
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So  much  energy  is  wasted  grappling  with  bureaucratic 
nuances,  individuals  essential  to  successfully  conducting 
IO  disengage  out  of  impatience  when  faced  with  other 
competing  operational  priorities.  This  process  damages  IO 
credibility  and,  even  more  importantly,  wastes  valuable 
time  needed  to  develop  and  employ  IO  defensive  measures. 
Too  often,  information  operations  is  mistakenly  and  exclu¬ 
sively  associated  with  computer  warfare.  This  serious  mis¬ 
understanding  undermines  the  ability  to  protect  the 
United  States  from  attacks  and  impedes  development  of 
successful  counter  and  offensive  IO  strategies. 

Information  operations  are  conducted  daily,  although 
they  are  not  always  recognized  as  such.  For  example,  dip¬ 
lomats  employ  IO  as  demonstrated  by  the  frequent  verbal 
sparring  between  Iraq  and  the  United  States.  As  seen  here, 
the  psychological  aspects  of  IO  sometimes  approximate  the 
game  of  poker  by  employing  techniques  of  bluffing  while 
trying  to  ascertain  strengths  of  the  opponent’s  hand.  If  not 
carefully  considered,  IO  strategies  can  backfire,  as  seen  in 
the  town  meeting  held  in  February  1998  at  Ohio  State 
University  with  Secretary  of  Defense  William  Cohen,  Secre¬ 
tary  of  State  Madeline  Albright,  and  National  Security  Ad¬ 
visor  Sandy  Berger.  Rather  than  mustering  public  support 
for  military  action  against  Iraq,  the  meeting  embarrass¬ 
ingly  highlighted  to  the  world  a  lack  of  US  concurrence  on 
that  very  point. 


Love  It  or  Hate  It 

Information  operations  provokes  strong  reactions,  paral¬ 
leling  the  response  to  airpower  in  the  first  half  of  the 
twentieth  century.  One  extreme  position  advocates  IO 
(some  of  these  proponents  are  considered  evangelists), 
while  those  at  the  other  extreme  view  IO  as  little  more 
than  trendy  terminology,  employed  because  funds  are  cur¬ 
rently  available  for  IO-affiliated  projects.  The  pragmatic 
position  lies  somewhere  in  between.  Why  this  intense  re¬ 
sponse?  Some  early  proponents  of  IO  lost  credibility,  as 
did  early  advocates  of  airpower,  by  claiming  operational 
benefits  far  beyond  what  was  technically  available  at  the 
time.  In  the  1920s  and  into  the  early  1940s,  visionaries  of 
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airpower  claimed  capabilities  that  would  not  come  to  pass 
until  much  later  in  World  War  II.  Billy  Mitchell,  for  exam¬ 
ple,  postulated  that  “nothing  can  stop  the  attack  of  aircraft 
except  other  aircraft.”  He  even  predicted  the  day  when 
“aerial  torpedoes”  would  be  “guided  by  gyroscopic  instru¬ 
ments  and  wireless  telegraphy."4  Strategists  working  in  the 
Air  War  Plans  Division  in  August  1941  also  overestimated 
capabilities  of  strategic  airpower.  Those  planners  postu¬ 
lated  that  bombers  would  win  air  superiority  while  pursuit 
aircraft  would  protect  bases  in  a  defensive  role.5  The 
Eighth  Air  Force  subsequently  sent  large  groups  of  unes¬ 
corted  heavy  bombers  deep  into  the  German  heartland. 
This  strategy  was  disastrous  until  technology  caught  up  to 
strategy.  Similarly,  airpower  strategists  in  Desert  Storm 
oversold  airpower’s  potential  with  the  plan  Instant  Thun¬ 
der.  They  claimed  that  airpower  could  win  the  war  by 
executing  700  daily  strikes  deep  in  Iraq  for  six  consecutive 
days.  The  plan  lost  some  credibility  when  it  made  no  al¬ 
lowances  to  attack  ground  forces  and  could  not  respond  to 
the  question,  “What  happens  after  day  six?"6 

What  were  the  overzealous  claims  of  information  opera¬ 
tions?  Enthusiasts  champion  IO  as  a  truly  unique  form  of 
warfare,  otherwise  known  as  a  revolution  in  military  af¬ 
fairs,  a  provocative  statement  in  itself.  They  forecast  domi¬ 
nant  battlespace  awareness,  where  wars  would  be  fought 
and  won  exclusively  in  the  electronic  domain  with  virtual 
combat  staffs  zapping  information  across  networks.  Others 
make  alarmist,  Doomsday-like  predictions  of  impending 
catastrophic  attack  on  the  US  strategic  information  infra¬ 
structure,  sometimes  dramatically  referred  to  as  an  “elec¬ 
tronic  Pearl  Harbor.” 


In  Search  of  a  Balanced  Approach 

Is  IO  an  RMA  as  many  claim  or  a  just  a  logical  extension 
of  existing  technology?  Pragmatists  argue  the  latter.  Gain, 
exploit,  defend,  and  attack.  The  fundamentals  of  informa¬ 
tion  warfare — attacking  an  opponent's  information  while 
protecting  and  enhancing  friendly  information — have  not 
changed  through  time.  Information  has  been  viewed  as 
both  target  and  weapon  for  thousands  of  years.  Sun  Tzu’s 
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principles,  inculcated  in  disciples  since  500  B.C.,  liberally 
apply  such  techniques  as  spies,  rumors,  deception,  and  op¬ 
erational  security.  Sun  Tzu  regarded  information  as  essential 
to  war,  “Delicate  indeed!  Truly  delicate!  There  is  no  place 
where  espionage  is  not  used.”7  His  philosophy  was  to  wage  a 
war  of  perceptions,  manipulating  data,  and  public  opinion; 
the  target  was  the  mind  of  his  enemy.  Military  objectives 
included  disrupting  alliances,  ascertaining  enemy  plans, 
strengths,  and  weaknesses,  and  attacking  enemy  strategy. 
The  ultimate  objective  for  Sun  Tzu’s  army  was  to  subdue  the 
enemy  without  fighting.  He  continues,  “Those  skilled  in  war 
subdue  the  enemy’s  army  without  battle.  They  capture  his 
cities  without  assaulting  them  and  overthrow  his  state  with¬ 
out  protracted  operations.”8  Today,  IO  strategists  apply  Sun 
Tzu’s  principles  powered  by  information  age  technology,  sup¬ 
porting  the  argument  that  information  operations  is  not  an 
RMA.  Hopefully,  applying  these  principles  will  remove  some 
of  the  sensationalism  decried  by  IO  critics. 

Pragmatists  also  downplay  the  impending  onset  of  an 
electronic  Pearl  Harbor.  Such  a  coordinated  strike  across 
our  infrastructure  would  require  extensive,  detailed  intelli¬ 
gence  on  vulnerabilities  spanning  political,  economic,  and 
military  systems.  The  President’s  Commission  on  Critical 
Infrastructure  Protection  (PCCIP)  reached  the  same  con¬ 
clusion  in  its  final  report  published  in  October  1997:  “The 
Commission  has  not  discovered  an  immediate  threat  suffi¬ 
cient  to  warrant  a  fear  of  imminent  national  crisis.”9  An¬ 
other  major  study  conducted  by  the  Defense  Science 
Board  (DSB)  does  not  accept  the  assertions  of  popular 
press  that  a  few  individuals  can  easily  bring  the  United 
States  to  its  knees.10  DSB  assesses  a  major  strategic  dis¬ 
ruption  by  the  year  2005  as  “low.”11 

This  discussion  does  not  intimate,  however,  that  we  can 
ignore  IO  in  the  interim.  Both  studies  assess  the  current 
IO  threat  as  "significant”  based  on  numerous  intrusions, 
system  vulnerabilities,  and  an  as-yet  minimal  ability  to 
detect,  deter,  and  respond  to  these  attacks.  That  same 
DSB  report  assesses  as  “widespread”  the  threat  of  orches¬ 
trated  tactical  information  warfare  by  the  year  2005.  While 
these  two  reports  are  significant,  they  are  also  dated  (table  1). 
Technological  developments  spring  forth  almost  overnight. 
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Table  1 

Projected  Threat  Assessment 


Threat  Assessment 

Validated 

Existence 

Existence 
Likely  but  not 
Validated 

likely  by 
2005 

Beyond 

2005 

Hacker 

W 

— 

— 

— 

Disgruntled 

W 

— 

— 

— 

Employee 

— 

— 

— 

— 

Crook 

w 

— 

— 

— 

Organized  Crime 

L 

— 

— 

Political  Dissident 

— 

w 

— 

Terrorist  Group 

— 

L 

w 

— 

Foreign  Espionage 

L 

— 

w 

— 

Tactical 

Countermeasures 

— 

W 

— 

— 

Orchestrated  Tactical  IW 

— 

— 

L 

w 

Major  Strategic 

Disruption  of  US 

— 

— 

L 

and  so  do  capabilities  of  10  adversaries  and  subsequent 
vulnerabilities  of  the  US  infrastructure.  Unfortunately,  the 
structured,  sophisticated  computer  attack  waged  against 
the  DOD  in  February  1998  indicates  the  PCCIP  and  DSB 
threat  assessments  may  now  be  overly  optimistic. 


A  Whole  New  World 

So,  what  is  new?  The  most  monumental  change  is  the 
explosion  of  information  technology  and  potential  ramifica¬ 
tions  of  a  large-scale  “malfunction."  Military  professionals 
agree  that  information  technology  affects  the  art  of  war. 
War  has  indeed  evolved  from  applying  information  in  war, 
also  known  as  intelligence,  to  focusing  on  information  as  a 
means  to  wage  war;  that  is,  “information  warfare."  That  impor¬ 
tance  has  been  reflected  in  both  joint  and  service  doctrines. 

Questions  arise,  however.  To  what  extent  can  IO  shape 
the  battlefield?  Have  we  protected  our  own  information 
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infrastructure?  Does  the  United  States  have  an  IW  early 
warning  system?  What  are  the  indications  and  warning 
signs  of  an  impending  IW  attack?  How  susceptible  is  the 
United  States  to  information  warfare,  both  at  home  and  at 
deployed  locations?  These  questions  entail  everything  from 
the  adversary  affecting  our  command  and  control  (C2)  in¬ 
formation  flow  to  national  media  influencing  public  opin¬ 
ion  and  driving  foreign  policy. 

To  answer  these  and  other  questions,  one  must  under¬ 
stand  the  intricacies  of  the  current  information  environment. 
The  relationship  of  data  automation  even  five  years  ago  com¬ 
pared  to  that  of  today  is  analogous  to  a  conventional  bomb 
contrasted  with  a  nuclear  warhead.  The  explosion  of  connec¬ 
tivity  (such  as  the  Internet  and  World  Wide  Web),  data  trans¬ 
mittal  rates,  networking,  telecommunications,  and  depend¬ 
ence  thereon,  quite  simply  transformed  military,  political, 
and  economic  dynamics  on  a  global  scale.  The  Internet  now 
transcends  national  borders.  Individuals  of  common  inter¬ 
ests  form  and  operate  within  their  own  cyberterrain.  Global 
technology  trends  are  reflected  in  table  2. 12 

Few  individuals  foresaw  the  exponential  growth  of  the 
global  Internet  or  the  degree  of  reliance  by  technologically 
advanced  nations.  Hence,  when  systems  were  initially  de¬ 
veloped  and  subsequently  linked,  network  security  to  the 
level  needed  today  was  not  a  prime  consideration.  Conse¬ 
quently,  network  owners  are  currently  retrofitting  these 
systems  to  negate  demonstrated  vulnerabilities,  even  as 
adversaries  continue  to  hone  their  own  predatory  skills. 
Deregulation,  restructuring,  and  economic  troubles  also 
drove  some  of  these  changes,  causing  corporations  to 
downsize  and  merge,  eliminate  forward-deployed  offices, 
and  rely  instead  on  “virtual”  offices  by  way  of  intercon¬ 
nected  networks  and  the  Internet.  When  times  improved, 
network  owners  expanded  and  upgraded  their  information 
infrastructures.  Increasing  network  connectivity  proved  to 
be  both  a  blessing  and  a  curse.  To  the  positive-thinking 
owner,  increased  connectivity  improved  overall  system  reli¬ 
ability  by  providing  backup  programs.  To  the  negative 
owner,  increased  network  connectivity  exacerbates  overall 
vulnerability  in  that  a  weak  link  in  one  system  can  dam¬ 
age  the  entire  network. 
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Table  2 

Global  Technology  Trends 


CATEGORY 

15  YEARS  AGO 

1996 

5  YEARS 
HENCE 

PERSONAL 

COMPUTERS 

THOUSANDS 

400  MILLION 

500  MILLION 

LOCAL  AREA 

NETWORKS 

THOUSANDS 

1.3  MILLION 

2.5  MILLION 

WIDE  AREA  NETWORKS 

HUNDREDS 

THOUSANDS 

TENS  OF 
THOUSANDS 

VIRUSES 

SOME 

THOUSANDS 

TENS  OF 
THOUSANDS 

INTERNET  DEVICES 
ACCESSING  THE 

WORLD  WIDE  WEB 

NONE 

32  MILLION 

300  MILLION 

POPULATION  WITH 
SKILLS  FOR  CYBER 
ATTACK 

THOUSANDS 

17  MILLION 

19  MILLION 

TELECOMMUNICATIONS 
SYSTEMS  CONTROL 
SOFTWARE 

SPECIALISTS 

FEW 

1.1  MILLION 

1.3  MILLION 

Information:  America’s  New  Achilles’  Heel? 


The  United  States  is  arguably  one  of  the  world’s  most 
technologically  sophisticated  nations,  among  the  most  de¬ 
pendent  on  information  infrastructures  and  the  most  vul¬ 
nerable.  Stand-alone  local  area  networks  (LAN)  rapidly 
evolved  to  what  is  now  referred  to  as  cascading  informa¬ 
tion  infrastructures  at  the  DOD  (DII),  national  (Nil),  and 
global  (GII)  levels.  Most  of  our  $7  trillion  economy  relies  on 
an  estimated  125  million  computers,  associated  networks, 
and  satellite  connectivities.  These  automated  infrastructures 
have  an  estimated  financial  value  as  indicated  in  figure  2. 13 

According  to  the  PCCIP,  the  United  States  uses  42  per¬ 
cent  of  the  world’s  computing  power  and  60  percent  of  the 
world’s  Internet  assets.  It  operates  on-line  200  million 
hours  daily.  The  commission  also  determined  the  extent  to 
which  private  and  government  functions  depend  upon  in- 
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Figure  2.  Infrastructure  Values 


formation  and  communications.  Specifically,  90  percent  of 
large  businesses  and  75  percent  of  small  ones  have  LAN, 
and  the  federal  government  spends  $40  billion  annually  on 
information  technology.14  Another  significant  observation 
concerned  the  eroding  distinctions  between  DII,  Nil,  and 
GII.  Commercial  ownership  of  a  majority  of  the  connected 
networks  adds  a  further  complication  to  the  challenge  of 
information  protection. 


Impact  on  National  Defense 

The  US  military,  traditionally  charged  with  defending 
continental  borders  of  the  United  States,  has  no  jurisdic¬ 
tion  over  the  borderless  cyberspace  and  little  control  over 
Nil  infrastructures  upon  which  its  forces  depend.15  Skeptics 
frequently  underestimate  the  military’s  dependence  upon 
civilian  infrastructure.  They  claim  that  while  the  civilian 
infrastructure  is  vulnerable,  “military  systems  are  usually 
so  isolated  and  uniquely  programmed  that  there  is  little 
assurance  they  could  be  disabled  in  a  military  strike.”16 
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Recognizing  the  fallacy  of  this  argument,  President  Bill 
Clinton  signed  Executive  Order  (EO)  13010  on  critical  in¬ 
frastructure  protection  because  “certain  national  infra¬ 
structures  are  so  vital  that  their  incapacity  or  destruction 
would  have  a  debilitating  impact  on  the  defense  or  eco¬ 
nomic  security  of  the  United  States."17  EO  13010  estab¬ 
lished  the  PCCIP,  which  combined  the  efforts  of  federal, 
state,  and  local  government  officials  with  private  sector 
chief  executive  officers  and  chief  information  officers  to 
address  the  issue  of  information  assurance.  The  commis¬ 
sion  was  charged  to  assess  the  specific  components  of  the 
infrastructure,  identify  vulnerabilities,  and  make  recom¬ 
mendations  to  protect  these  national  assets.  This  study 
examined  energy  (electric  power  and  gas  and  oil  storage/ 
transportation),  physical  distribution  (railroads,  highways, 
air  traffic,  maritime  transport,  and  pipelines),  banking  and 
finance,  information  and  communications  (computer  hard¬ 
ware  and  software  and  satellite  communications),  and  vital 
human  services  (water  supply  system,  emergency  rescue 
services,  social  security,  and  welfare).18 

The  secretary  of  defense  simultaneously  tasked  the  De¬ 
fense  Science  Board  (DSB),  a  federal  advisory  committee,  to 
address  information  warfare  defense  (IW-D).  The  efforts  ran 
concurrently,  but  the  scope  of  coverage  was  specifically  de- 
conflicted  to  preclude  duplication  of  effort.  Note,  however, 
that  the  two  studies  reached  similar  conclusions.  The  DSB 
task  force  made  50  recommendations  in  its  final  report,  13  of 
which  were  deemed  “imperative.”  Several  recommendations 
are  carryovers  from  previous  DSB  reports  spanning  the  past 
three  years  and  indicating  progress  not  yet  made.  The  report 
noted  that  DOD  employs  more  than  2.1  million  computers, 
an  estimated  10,000  LAN,  and  more  than  100  long-distance 
networks.  It  uses  them  to  support  all  facets  of  military  opera¬ 
tions.  19  Lack  of  progress  in  eliminating  system  vulnerabilities 
and  increasing  US  reliance  on  these  strategic  infrastructures 
is  a  potentially  disastrous  combination.  The  most  urgent 
recommendation  contained  in  the  November  1996  report 
was  that  the  secretary  of  defense  “designate  an  accountable 
IW  focal  point.”  The  second  recommendation  was  that 
DOD  should  organize  for  IW-D  by  establishing  “virtual  or¬ 
ganizations  that  draw  on  existing  assets  and  capabilities." 
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The  DSB  suggested  allocating  approximately  $3  billion  to 
implement  recommended  fixes.20 

A  third  study,  this  one  conducted  by  the  National  De¬ 
fense  Panel  (NDP),  also  made  strong  observations.  Its  De¬ 
cember  1997  report  contrasted  likely  antagonists  and  fu¬ 
ture  threats  (e.g.,  IW  and  weapons  of  mass  destruction) 
with  current  DOD  organizational  structure  and  projected 
budgets.  The  NDP  identified  a  major  disconnect.  Its  over¬ 
arching  recommendation  was  that  the  DOD  realign  re¬ 
sources  to  best  accommodate  future  threats  and  vulner¬ 
abilities.  Using  the  Toffler  analogy,  the  United  States 
should  transition  from  an  industrial  (Second  Wave)  to  an 
information  (Third  Wave)  military  posture.21 

A  modicum  of  progress  has  been  made  towards  resolv¬ 
ing  these  shortfalls.  The  DOD  intensified  its  approach  to 
both  offensive  and  defensive  aspects.  As  an  example,  in 
March  1998  Secretary  of  Defense  Cohen  proposed  a  new 
deputy  assistant  secretary  for  IO  within  the  extant  struc¬ 
ture  of  the  assistant  secretaiy  of  defense  for  Command, 
Control,  Communications,  and  Intelligence  (ASD/C3I).  This 
new  position  would  oversee  two  directorates:  one  for  infor¬ 
mation  assurance  and  the  other  for  offensive  information 
operations.  According  to  Barry  Collin,  senior  research  fel¬ 
low  at  the  Institute  for  Security  and  Intelligence,  “It’s  the 
most  exciting  revelation  to  date  on  the  information  opera¬ 
tions  front.  It  shows  the  maturing  nature  of  information 
operations  as  an  offensive  tool,  which  is  new.  It’s  going  to 
be  taken  seriously.”22  Meanwhile,  vulnerabilities  persist. 


The  Pen  Is  Mightier  than  the  Sword 

Information  has  never  been  more  powerful  than  it  is 
today.  Proponents  of  Star  Trek-like  information  warfare 
must  consider  the  vulnerability  and  susceptibility  of  the 
media,  the  American  public,  and  our  policy  makers  to  the 
deception  and  psychological  operations  waged  daily  against 
the  United  States.  Adversaries  expertly  manipulate  the  me¬ 
dia,  leveraging  them  against  America’s  well-publicized  lack  of 
tolerance  for  American  bloodshed  or  ill-treatment  of  a  “de¬ 
fenseless”  people.  They  wage  IW  against  the  United  States  in 
the  form  of  psychological  operations,  altering  perceptions 
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and  the  will  of  the  American  public,  with  the  aim  of  affect¬ 
ing  American  foreign  policy.  For  decades,  terrorists 
adroitly  exploited  the  media  to  state  their  case  to  the  gen¬ 
eral  public  or  to  amplify  the  terror  of  their  attack. 

In  the  information  age,  adversaries  have  refined  this  stage¬ 
craft  into  a  fine  art,  actively  courting  the  power  of  the  press 
to  sway  world  opinion.  The  press  willingly  obliges.  Examples 
abound:  Iraq,  Somalia,  Haiti,  Rwanda,  and  Bosnia,  to  name 
a  few.  Saddam  Hussein  deflects  attacks  from  such  strategic 
sites  as  command  posts  by  collocating  civilians  as  human 
shields.  He  stages  anti-American  riots  in  the  streets  of  Bagh¬ 
dad,  bolstering  domestic  morale  and  simultaneously  making 
a  global  statement.  In  Somalia,  the  warlord  Gen  Mohammed 
Aidid  and  his  low-tech  insurgents  waged  information  warfare 
and  soundly  defeated  the  United  States.  Mimicking  Sad¬ 
dam’s  techniques,  Aidid  transformed  the  Mogadishu  Hospital 
into  a  strongpoint  for  militia  operations,  realizing  that  the 
United  Nations  would  not  target  the  facility.  He  was  a  master 
of  manipulation  and  deception,  staging  events  that  were  con¬ 
veniently  accessible  for  media  coverage.  Aidid  successfully 
manipulated  peace  initiatives  and  cease-fires,  thus  depriving 
the  international  force  of  a  political  rationale  to  militarily 
oppose  his  political  maneuverings.23  Images  of  a  dead,  naked 
American  soldier  gleefully  dragged  through  dirty  Somali 
streets  trumped  our  technologically  superior  military  might. 

“All  the  world  is  a  stage.”  Thanks  to  the  media,  not 
much  passes  unseen  in  the  information  age.  For  example, 
the  entire  world  watched  and  learned  military  lessons  from 
Desert  Shield  and  Desert  Storm.  That  the  United  States 
mustered  daunting  force-on-force  was  a  point  missed  by 
few,  friends  and  foes  alike.  These  operations  explosively 
proclaimed  America’s  conventional  military  might,  strongly 
discouraging  adversaries  from  engaging  the  United  States 
in  similar  conflicts.  That  this  conflict  heralded  the  age  of 
information  warfare  was  also  widely  noted.  Sun  Tzu  cor¬ 
rectly  advises  warriors  to  view  battles  from  the  adversary’s 
perspective,  to  determine  inherent  strengths  and  weak¬ 
nesses  (physical  and  psychological),  and  presume  those 
weaknesses  to  be  prime  targets  in  future  conflicts.  Just  as 
the  United  States  possesses  lethal  and  effective  conven- 
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tional  forces,  numerous  nations  and  nonstate  actors  are 
intently  developing  the  art  of  information  warfare. 

They  Are  Here!  But  Who  Are  They? 

The  cold  war  is  dead,  but  an  information  warfare,  the 
same  war  that  killed  the  cold  war,  still  rages.  Its  prime 
characteristics — stealth,  manipulation,  and  deception — are 
so  subtle  that  the  American  public  is  left  manifestly  and 
dangerously  unaware.  Information  technologies  are  inex¬ 
pensive  and  easily  obtained,  originating  points  of  attack 
are  difficult  to  locate,  perpetrators  hard  to  identify,  and 
damage  often  difficult  to  detect.  Recognized  as  strategic 
targets,  elements  throughout  our  Nil  and  DII  are  attacked 
daily.  Nil  targets  frequently  hit  include  public  switched 
telephone  networks,  financial  institutions,  and  transporta¬ 
tion  control  points,  all  obviously  crucial  to  employment  of 
USAF  forces.  Attacks  on  the  DII  are  also  prevalent.  The 
Government  Accounting  Office  estimated  250,000  at¬ 
tempted  penetrations  of  unclassified  DOD  systems  during 
calendar  year  1996. 24  The  Defense  Information  System 
Agency  (DISA)  estimates  65  percent  of  DOD  unclassified  sys¬ 
tems  are  vulnerable  to  penetration.25  Only  a  small  fraction  of 
penetrations  are  detected,  and  an  even  smaller  percentage  is 
actually  reported.  Unclassified  systems,  usually  less  strin¬ 
gently  protected  than  their  classified  counterparts,  pose 
tempting  and  lucrative  targets.  Disrupting,  corrupting,  or 
otherwise  impeding  the  flow  of  unclassified  data  can  severely 
block  military  operations. 


DOD  Feels  Pinch  of  Recent  IO  Attack 

In  February  1998  the  DOD  experienced  a  widespread, 
structured,  and  systematic  attack  on  unclassified  com¬ 
puter  systems.  Over  at  least  a  two-week  period,  perpetra¬ 
tors  targeted  1 1  sites  belonging  to  the  Air  Force  and  Navy. 
Most  of  the  attacks  concentrated  on  domain  name  servers 
(DNS),  which  transmitted  such  unclassified  but  still  sensi¬ 
tive  defense  information  as  logistics,  personnel,  and  pay¬ 
roll  data.  It  might  be  helpful  at  this  point  to  quantify  the 
seriousness  of  such  a  security  breach.  In  compromising  a 
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DNS,  a  perpetrator  could  access  multiple  passwords,  pre¬ 
clude  message  delivery,  and  even  alter  the  content  of  mes¬ 
sages — unbeknownst  to  the  intended  recipient.  The  DOD 
scrambled  to  assess  the  damage  and  identify  the  perpetra¬ 
tor  (s),  both  incredibly  challenging  objectives.  According  to 
an  article  by  the  Associated  Press,  Deputy  Secretary  of 
Defense  John  Hamre  speculated  that  attacks  have  been 
aimed  at  inserting  hidden  trapdoors  into  the  system  for 
future  surreptitious  entry.26  Aviation  Week  carried  an  arti¬ 
cle  on  offensive  IW  not  more  than  two  weeks  prior  to  these 
series  of  intrusions.  The  author  supposed,  “In  some  future 
international  crisis,  communications  switching  stations 
may  be  primary  targets  for  offensive  attacks  by  computer 
hackers  serving  the  US  military.  These  sites  provide  sev¬ 
eral  needed  elements  for  getting  ‘inside  an  opponent’s 
mind’  as  some  US  officials  describe  the  task  of  penetrating 
foreign  computers  to  read  communications  traffic.”27  In 
retrospect,  this  article  seemed  almost  prophetic  in  its  tim¬ 
ing  and  ironic  in  that  the  United  States  was  the  victim 
rather  than  the  perpetrator,  as  the  author  presumed. 

Two  footnotes  to  this  attack  must  be  mentioned.  The  first 
is  the  identification  of  the  perpetrators.  Some  analysts  in¬ 
itially  speculated  that  this  attack  might  be  associated  with 
the  US  buildup  in  the  Middle  East.  Other  analysts  assessed 
the  attack  as  teenage  hacking,  acts  of  highly  skilled  but 
nonetheless  amateur  “cyber-kids.”  The  probes  lacked  the  in¬ 
tensity  of  a  focused,  professional  attack.  As  it  turned  out, 
three  teens  were  indeed  the  culprits:  two  Americans  in  Califor¬ 
nia  and  their  mentor,  Enud  Tennenbaum,  an  Israeli  hacker, 
also  known  as  "The  Analyzer.”  The  second  sobering  observa¬ 
tion  was  the  DOD’s  lack  of  preparation  to  respond  effectively 
and  expeditiously.  In  absence  of  a  clearly  delineated  IO  struc¬ 
ture  within  DOD,  the  center  of  gravity  for  rallying  a  response 
fell  to  the  Joint  Staff/J39,  an  organization  charged  with  policy 
development,  not  running  defensive  operations.  Recall  the 
cliche,  “If  you  can’t  stand  the  answer,  don’t  ask  the  question.” 
The  United  States  does  not  have  the  luxury  of  avoiding  a 
poignant  question  here.  “If  two  teenagers  can  singularly  grip 
the  attention  of  the  DOD  and  cause  havoc  regarding  informa¬ 
tion  defense,  how  will  the  United  States  respond  to  a  covert, 
more  insidious,  and  purposeful  attack?” 
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IO  Adversaries:  Can  You  Detect  Them? 

Potential  adversaries,  plentiful  as  targets  within  our  in¬ 
frastructure,  are  multiplying:  amateur  computer  hackers; 
“professional"  nonstate  actors  (that  is,  terrorists);  organ¬ 
ized  crime  (that  is,  drug  cartel  or  Mafia);  the  traditional 
adversarial  nation-state;  and  even  disgruntled  domestic 
employees.  According  to  a  Department  of  Energy  and  Na¬ 
tional  Security  Agency  (NSA)  estimate,  120  countries  are 
developing  IO  capabilities.28  China,  for  example,  intently 
focused  on  IO,  recognizes  that  on  battlefields  of  the  future, 
“Information  and  Information  Technologies  (IT)  will  be  the 
dominant  factors.”  The  British  Broadcasting  Company’s 
Summary  of  World  Broadcasts  in  August  1996  carried  an 
item  which  announced  China's  development  of  the  Military 
Strategies  Research  Center’s  focus  on  IO  and  translated  an 
article  published  in  the  Chinese  paper,  Jiefangjun  Boo’,  on 
21  May  1996.  An  extract  of  the  same  follows: 

After  the  Gulf  War,  when  everyone  was  looking  forward  to  eternal 
peace,  a  new  military  revolution  emerged.  This  revolution  Is 
essentially  a  transformation  from  the  mechanized  warfare  of  the 
industrial  age  to  the  Information  warfare  of  the  Information  age. 
Information  warfare  is  a  war  of  decisions  and  control,  a  war  of 
knowledge  and  a  war  of  intellect.  .  .  .  The  all  conquering  stratagems 
of  Sun  Tzu  more  than  two  millenniums  ago.  such  as  “vanquishing 
the  enemy  without  fighting”  and  subduing  the  enemy  by  “soft 
strike”  or  “soft  destruction”  could  Anally  be  truly  realized  under 
today's  technological  conditions.29 


Russian  Legacy: 

From  “Active  Measures”  to  IO 

The  Russians  are  experts  in  IO.  They  can  claim  opera¬ 
tional  experience  dating  back  to  the  1920s  when  Felix 
Dzershinsky  founded  the  Cheka,  which  later  evolved  into 
the  KGB.  It  is  important  to  remember  that,  as  discussed 
above,  information  operations  encompasses  many  tech¬ 
niques  and  tactics  other  than  computer  penetration  or 
automated  data  processing  (ADP)  manipulation.  The  Rus¬ 
sians  employed  active  measures  on  a  global  scale,  literally. 
This  benign  term  encompasses  forgeries,  deceptive  infor¬ 
mation,  rumors,  staged  protests,  use  of  front  organiza¬ 
tions,  blackmail,  bribery,  and  manipulation  of  the  media. 
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Some  analysts  estimate  that  during  the  height  of  the  cold 
war,  the  Soviet  Union  spent  $3  billion  annually  on  active 
measures.  Stanislav  Levchenko,  a  former  high-ranking 
KGB  official  who  defected  to  the  United  States,  warned 
that  “by  weakening  or  destroying  the  consensus  within  a 
free  country,  active  measures  do  much  more  harm  than 
classical  espionage.  In  the  West,  few  people  understand 
this  concept.”30  One  example  of  media  manipulation  that 
occurred  in  1979  bears  repeating  because  of  its  relevance 
today  and  its  potential  application  by  such  contemporary 
adversaries  as  Iraq.  A  French  journalist,  Pierre-Charles 
Pathe,  was  exposed  after  covertly  serving  as  a  media 
mouthpiece  of  the  KGB  for  19  years.  During  this  time,  he 
became  a  highly  respected  member  of  the  media  and 
wielded  great  influence  in  both  governmental  and  indus¬ 
trial  circles.  When  his  complicity  was  discovered,  he  was 
tried,  found  guilty,  and  sentenced  to  five  years  in  prison.31 

Regarding  the  technologically  advanced  computer  warfare, 
the  Soviet  Union  was  among  the  leaders  there  as  well.  One  of 
the  first  highly  publicized  instances  of  computer  penetration, 
detailed  in  Clifford  Stoll’s  book,  The  Cuckoo's  Egg:  Tracking 
a  Spy  Through  the  Maze  oj  Computer  Espionage,  was 
tracked  back  to  the  Bulgarian  KGB.32  Despite  current  eco¬ 
nomic  woes,  Russia  continues  an  active  research  and  devel¬ 
opment  (R&D)  program  in  the  area  of  IO  and  is  among  those 
countries  attempting  to  use  computer  viruses  as  weapons. 
Russia  recently  institutionalized  its  efforts  by  creating  the 
obliquely  titled  Federal  Agency  for  Government  Communica¬ 
tions  and  Information.33  This  analysis  doesn’t  necessarily 
postulate  an  immediate  IO  threat  posed  by  the  Russians. 
But  it  does  recognize  their  history  of  in-depth  expertise  in 
the  IO  field  and  serves  as  a  reminder  that  once  learned,  such 
lessons  ought  not  to  be  forgotten. 


DOD  Exercises  Develop  IO  Muscles 

Recognizing  vulnerabilities  inherent  in  the  information 
age,  the  USAF  is  developing  and  conducting  exercises  to 
determine  the  severity  of  the  IO  threat  and  our  ability  to 
respond.  The  first  such  groundbreaking  exercise.  Eligible 
Receiver,  was  concluded  in  June  1997.  This  no-notice  ex- 
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ercise  was  a  “first”  in  several  respects.  It  brought  into  play, 
by  way  of  both  script  and  real  action,  all  elements  of  infor¬ 
mation  warfare:  deception,  EW,  PSYOP,  information  at¬ 
tack,  and  physical  attack.34  The  scenario  included  an  ad¬ 
versary  PSYOP  campaign  that  made  efficient  use  of  the  US 
news  media,  scripted  terrorist  attacks  on  public  power  and 
communications,  actual  “hostile”  IW  attacks  on  DOD  com¬ 
munications  and  computer  infrastructures,  and  extensive 
E-mail  spoofing  to  confuse  the  Blue  Team.  The  exercise 
demonstrated  accessibility  of  US  databases  to  adversary 
intrusion  and  the  difficulty  that  national-level  organiza¬ 
tions — including  the  Department  of  Justice  (DOJ),  NSA, 
and  DOD — experienced  differentiating  a  normal  outage 
from  an  actual  attack,  and  even  recognizing  database  com¬ 
promise  once  it  had  occurred.  Also  highlighted  was  the 
cumbersome  coordination  process  at  the  national  level, 
which  slowed  the  process  of  sharing  information  relative  to 
an  ongoing  IW  attack  and  impeded  efforts  to  recover  lost 
data  while  protecting  as  yet  unaffected  systems.35 

The  major  benefits  resulting  from  this  exercise  were  the 
identification  of  what  didn’t  work  and  operational  degrada¬ 
tion  of  IO  attacks.  In  several  instances  IO  attacks  did,  in  fact, 
delay  deployment  of  US  forces.  Coordination  among  federal 
agencies  was  painfully  slow,  taking  days  rather  than  hours. 
The  DOD  lacked  an  organization  to  arrange  notices  of  attack, 
publicize  responses  as  situations  deteriorated,  and  show  ef¬ 
forts  to  reconstitute.  These  responsibilities  fell  to  the  exercise 
joint  staff  by  default.  Little  coordination  occurred  between 
the  military  and  private  companies,  which  impeded  the  even- 
turd  recognition  of  a  coordinated  attack  on  the  infrastructure 
as  opposed  to  random  accidents.  Organizations  involved 
demonstrated  minimal  IO  awareness.  In  most  instances,  sys¬ 
tem  administrators  failed  to  detect  successful,  real-world, 
physical  computer  penetrations. 

On  the  offensive  side,  the  exercise  commander  in  chief 
(CINC)  experienced  great  difficulty  in  obtaining  approval  to 
implement  IW  operations.  Furthermore,  most  of  the  pre¬ 
sumed  ADP-related  offensive  IW  weapons  are  so  sheathed  in 
secrecy  that  they  were  simply  unavailable  for  exercise  play. 
This  begs  the  question  of  the  utility  of  such  weapons,  espe¬ 
cially  when  juxtaposed  against  the  theory  of  “train  in  peace 
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as  you  would  execute  in  war.”  One  of  the  significant  les¬ 
sons  learned  from  this  exercise  was  the  need  for  an  JO  cell 
Integrated  into  the  CINC's  war-fighting  staff.  This  develop¬ 
ment  led  to  an  imaginative  and  thought-provoking  ques¬ 
tion,  “What  might  be  the  composition  of  an  10  dream  team 
and  what  would  it  contribute  to  a  war-fighting  CINC?" 

IO  Dream  Team: 

Composition  and  Mission 

Of  primary  importance,  the  10  dream  team  must  be 
joint.  It  would  consist  of  personnel  skilled  in  the  various 
aspects  of  information  operations,  much  like  the  Joint 
Command  and  Control  Warfare  Center,  now  manned  for 
these  assorted  skills.  The  center  recently  incorporated 
PSYOP  expertise.  Legal  representatives  must  also  be  in¬ 
cluded  within  the  IO  cell  to  clarify  rules  of  engagement 
as  they  pertain  to  application  of  IW.  Public  affairs  per¬ 
sonnel  must  also  be  intimately  involved  in  both  the 
planning  and  execution  of  information  operations.  The 
IO  cell  would  be  charged  with  developing  an  IO  cam¬ 
paign  supporting  traditional  air,  land,  sea,  and  space 
forces,  certainly.  However,  this  team  would  also  recog¬ 
nize  and  resist  the  inherent,  restrictive  tendency  to  ap¬ 
ply  new  weapons  technology  exclusively  to  established 
war-fighting  doctrine  as  a  mere  force  multiplier.  This 
occurrence  is  reminiscent  of  the  tension  in  WW  II  that 
resulted  from  subordinating  airpower  to  Army  command¬ 
ers  for  close  air  support  of  ground  forces  as  opposed  to 
maintaining  airpower  as  its  own  entity  and  applying  air 
assets  to  a  new  mission — strategic  bombing. 

The  team  must  literally  think  like  the  enemy.  It  must 
anticipate  his  response  to  external  stimuli;  his  predisposi¬ 
tion  on  religious,  social,  cultural,  and  economic  issues;  his 
degree  of  popular  support;  and  his  particular  strengths 
and  weaknesses.  To  obtain  these  insights,  the  intelligence 
community  must  reinvigorate  geopolitical  and  economic 
analyses.  These  areas  suffered  from  cutbacks  in  recent 
years,  as  organizations  chose  to  consolidate  resources  in 
the  more  technical  and  military-related  analysis.  With  this 
information,  the  IO  cell  could  devise  a  penetrating  and 


BASS  19 


effective  IO  campaign.  Gen  George  Patton  exemplified  this 
approach  in  his  battles  against  Field  Marshal  Erwin  Rom¬ 
mel.  Why  was  Patton  so  successful?  One  scene  in  the 
movie  Patton!  offers  an  explanation,  when,  while  gazing  off 
at  a  distance,  the  general  crows,  “Rommel,  you  magnifi¬ 
cent  bastard,  I  read  your  book!" 

Ideally,  IO  officers  would  be  trained  in  proven  informa¬ 
tion  operations  techniques  employed  during  the  twentieth 
century  to  either  emulate  or  counter,  as  appropriate.  The 
1930s  and  1940s  were  replete  with  IO  innovations,  includ¬ 
ing  such  technological  advances  as  radar,  expanded  range 
of  radio  waves,  advances  in  cryptology,  and  resulting  im¬ 
pact  on  signals  intelligence;  innovative  methods  of  decep¬ 
tion;  and  manipulation  of  mass  media  and  psychological 
operations  by  such  propaganda  masters  as  Joseph  Goeb- 
bels.  The  cold  war  gave  birth  to  active  measures  and  tech¬ 
niques  of  meaconing,  intrusion,  jamming,  and  interception. 
Perhaps  experts  within  the  emerging  Russian  democracy 
might  provide  that  training  as  an  initial  step  towards  shar¬ 
ing  IO  methodology  with  allies.  Or,  perhaps  those  who  have 
already  defected  could  impart  that  hands-on  expertise.  The 
wise  student  chooses  to  learn  from  the  experts,  and  in  the 
cold  war,  the  Russians  were  the  best.  To  meet  the  challenge 
of  contemporary  IW,  we  should  study  such  adversaries  as 
Iraq’s  Saddam  Hussein  and  Somalia’s  Aidid. 


Aftermath  of  Eligible  Receiver 

Several  questions  were  raised  at  the  conclusion  of  exer¬ 
cise  Eligible  Receiver.  How  can  we  distinguish  a  hostile 
attack  from  an  amateur  perpetrator  and  a  single  event 
from  a  planned  campaign?  (Figure  3  illustrates  the  com¬ 
plexities  in  making  this  determination.)  How  do  DOD  and 
DOJ  legally  share  data  on  computer  attacks?  How  can 
interagency  coordination  be  expedited  from  hours  to  min¬ 
utes?  Which  agency  should  function  as  a  central  point  for 
detecting,  alerting,  and  responding  to  information  attacks? 
How  can  DOD  effectively  develop  and  retain  skilled  system 
administrators?  Should  DOD  establish  a  commander  in 
chief  for  IO?  Eligible  Receiver  spotlighted  this  weakness 
and,  as  the  three  teenage  hackers  painfully  demonstrated 
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Figure  3.  Accident  or  Attack? 


eight  months  later,  it’s  still  not  fixed.  Consequences  of 
inaction,  to  include  step-by-step  political,  economic,  and 
social  unraveling  of  the  United  States,  are  depressingly 
and  vividly  depicted  in  such  articles  as  “The  Great  Cyber 
War  of  2002”  and  "How  We  Lost  the  High-Tech  War  of  2007: 
A  Warning  from  the  Future.”  As  a  country,  the  United  States 
does  not  want  to  go  there,  but  it  may  not  have  a  choice  if 
adversaries  are  calling  the  shots.  Time’s  a  wastin’! 


Sand  Does  Not  a  Good  Foundation  Make! 

Air  Force  policy  focuses  today  on  such  concepts  as  full 
spectrum  dominance,  dominant  battlespace  awareness, 
and  “find,  fix,  track  or  target  anything  that  moves  on  the 
surface  of  the  earth”  (fig.  4), 36  Pretty  presumptuous  con¬ 
cepts.  Joint  Vision  2010  also  sets  lofty  operational  strate¬ 
gies:  dominant  maneuver,  precision  engagement,  focused 
logistics,  and  full-dimensional  protection.  In  a  speech  at 
the  1997  Air  Forces  Communications  and  Electronic  Asso¬ 
ciation  convention,  Adm  William  A.  Owens,  United  States 
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Figure  4.  Castle  on  the  Sand 

Navy,  Retired,  former  vice  chairman  of  the  Joint  Chiefs  of 
Staff,  envisioned  all-encompassing  sensors  enabling  the 
United  States  to  view  in  detail  adversary  movements  in 
any  theater  of  battle.37  The  enemy  would  presumably  ac¬ 
knowledge  his  infallibility  due  to  our  all-seeing  sensors 
and  voluntarily  acquiesce  to  US  desires.  The  accompany¬ 
ing  US  strategy  would  seem  to  be  to  intimidate  by  informa¬ 
tion.  In  addition  to  recklessly  assuming  inviolability  of  our 
reconnaissance  and  surveillance  technology,  this  approach 
seriously  underestimates  the  adversary's  religious  or  revo¬ 
lutionary  fervor.  Admiral  Owens  demonstrates  the  US  war 
fighters’  failure  to  think  like  the  enemy  and  his  persistent 
proclivity  to  expect  the  enemy  to  respond  as  would  US 
commanders.  This  is  a  proven  flawed  strategy  and  a  lesson 
US  war  fighters  seem  unable  to  learn. 

Foundation  for  the  Castle: 

How  Firm  Is  It? 

Upon  what  do  these  strategies  depend?  Technology  is  one 
good  answer,  but  why  the  emphasis?  Global  deployment  of 
US  forces  and  an  increasing  number  of  military  operations 
other  than  war  (MOOTW),  coupled  with  a  decreasing  DOD 
budget  and  downsized  military,  have  created  a  gap  in  US 
force  projection  and  war-fighting  capabilities.  Technology  will 
supposedly  close  that  gap.  What  underlying  foundation  is 
absolutely  fundamental?  Information — the  assured  avail¬ 
ability  of  friendly  data  (termed  information  assurance)  and 
knowledge  of  adversary  intentions,  movements,  and  status 
of  forces  (that  is,  intelligence). 

Recognizing  improvements  in  technology  and  information 
systems  .  .  .  full  spectrum  dominance  allows  joint  forces  to  prevail 
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across  the  range  of  national  military  strategy  from  peacetime 
engagement  to  deterrence  and  conflict  prevention,  to  fighting  and 
winning  in  combat.38 

Strategies  laid  out  in  the  US  Air  Force’s  Global  Engage¬ 
ment  and  Joint  Vision  2010  are  based  on  several  presump¬ 
tions.  First,  our  C2  systems  are  interoperable  and  fully 
capable  of  transmitting  data  among  allied  forces  and  US 
forces.  Second,  intelligence  collection,  production,  applica¬ 
tion,  and  dissemination  are  sufficiently  robust  to  fcollect 
against  any  required  target,  employing  both  technical  and 
human  intelligence  (HUMINT)  resources,  as  appropriate. 
Third,  US  wartime  data  flow  will  be  impervious  to  IW  at¬ 
tacks.  And  fourth,  services  will  recognize,  exploit,  inte¬ 
grate,  and  apply  IO  in  future  operations. 

All  four  presumptions  are  flawed.  First,  our  C2  systems 
are  not  yet  interoperable  among  DOD  forces,  and  certainly 
not  with  allied  systems.  The  National  Defense  Panel  also 
recognized  this  shortfall  when  it  said,  “We  must  move  rap¬ 
idly  to  the  next  level  of  jointness  among  uniformed  ser¬ 
vices:  full  commonality  of  US  military  information  systems. 
This  commonality  must  be  interoperable  with  the  informa¬ 
tion  systems  of  our  allies  as  well,  if  we  are  to  reap  the 
advantages  of  coalition  operations.”  The  report  further 
specified  that  the  United  States  should  develop  greater 
interoperability  with  allies  in  the  areas  of  doctrine,  train¬ 
ing,  operational  techniques,  and  R&D.39  Furthermore,  we 
have  not  completed  protocols  for  determining  what  infor¬ 
mation  to  share,  with  whom,  and  how,  and  we  are  only 
beginning  to  view  this  from  an  IW  perspective. 

Second,  while  intelligence  might  provide  data  to  find 
and  target  most  items  on  the  face  of  the  earth  (but  cer¬ 
tainly  not  all,  as  we  saw  in  Iraq),  intelligence  can  still  be 
deceived  by  dummies  and  decoys;  thus,  the  issue  becomes 
one  of  targeting  the  right  item.  Also,  air-  and  space-based 
systems  cannot  supplant  intelligence  provided  by  the  guy 
on  the  ground.  HUMINT  adds  a  unique  and  essential  di¬ 
mension  to  the  intelligence  product  and  will  have  an  even 
larger  role  in  the  information  age.  Therefore,  the  DOD  HU¬ 
MINT  effort  must  certainly  be  strengthened  to  better  sup¬ 
port  both  tactical  and  strategic  applications. 

IO  also  introduces  an  entirely  new  paradigm  affecting  the 
entire  intelligence  cycle.  The  US  intelligence  community 
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must  identify  and  collect  IO-related  essential  elements  of 
information,  generate  and  apply  timely  analytical  products, 
and  establish  an  indications  and  warning  system  to  antici¬ 
pate  IO  attacks.  Finally,  we  must  develop  the  tools  and 
methodology  to  detect  penetration  instantly,  to  quickly  move 
to  block  exploitation,  and  to  ascertain  damage  inflicted  from 
an  info  attack  (that  is,  equivalent  of  kinetic  bomb  damage 
assessment)  waged  both  against  us  and  against  our  adver¬ 
saries.  These  efforts  are  only  now  beginning. 

Third,  the  United  States  should  not  plan  combat  opera¬ 
tions  presuming  either  a  benign  or  information-friendly  envi¬ 
ronment.  Here’s  a  caution:  technology  can  be  deceptively  and 
intoxicatingly  disarming.  For  example,  tensions  in  the  Tai¬ 
wan  Straits  in  1995  seemed  to  substantiate  futurist  projec¬ 
tions  of  a  virtual  staff.  Most  command  information  ex¬ 
changes  between  deployed  US  Navy  forces  during  this  crisis 
were  based  on  video  teleconferences  and  electronic  mail 
which  enhanced  the  speed  of  command  and  situational 
awareness,  making  communication  “light  years  better  than 
phone  calls  and  AUTODIN  messages  that  once  took  hours  or 
days.”40  However,  it  is  important  to  keep  this  situation  in 
context;  specifically  since  the  US  Navy  enjoyed  the  benefits  of 
IA  technology  because  an  adversary  did  not  aggressively 
counter  that  technology.  In  actuality,  tensions  in  the  Taiwan 
Straits  in  1995  demonstrated  the  need  for  a  more  balanced 
assessment  of  technology  in  the  IA,  recognizing  its  limita¬ 
tions  as  well  as  its  capabilities. 

IW  is  likely  to  become  a  prominent  feature  of  future 
wars,  largely  because  this  concept  is  gaining  recognition 
globally.  Maj  Gen  Wang  Pufeng,  former  director  of  the 
strategy  department  at  the  Academy  of  Military  Science  in 
Beijing,  makes  this  very  point  when  he  argues  that 

In  the  near  future,  information  warfare  will  control  the  form  and 
future  of  war.  We  recognize  this  developmental  trend  of  information 
warfare  and  see  it  as  a  driving  force  in  the  modernization  of  China’s 
military  and  combat  readiness.  This  trend  will  be  highly  critical  to 
achieving  victory  in  future  wars.  The  thrust  of  China’s  military 
construction  and  development  of  weapons  and  equipment  will  no 
longer  be  toward  strengthening  the  “firepower  antipersonnel  system" 
of  the  industrial  age,  but  toward  the  strengthening  of  information 
technology,  information  weapon  systems,  and  information 
networking.  Our  sights  must  not  be  fixed  on  the  firepower  of  the 
industrial  age.  rather  they  must  be  trained  on  the  information 
warfare  of  the  Information  age.41 
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The  author  then  astutely  analyzes  US  operations  In  Desert 
Storm  from  an  IW  perspective  and  concludes  with  his  own 
proposed  strategy  for  conducting  IW  attacks  against  China’s 
adversaries.  Senior  DOD  leaders,  military  and  civilian  alike, 
should  recognize  valuable  strategic  insights  contained  in 
General  Pufeng's  open-source  writing  and,  perhaps  using  his 
article  as  a  backdrop,  reexamine  some  of  our  own  national 
security  strategies  and  operational  concepts. 

Fourth,  services  are  just  beginning  to  incorporate  IO  in 
exercises,  subsequently  experiencing  and  understanding  the 
results  of  IW  attacks.  This  aspect  highlights  the  defensive 
aspect;  that  is,  the  need  to  protect  information.  It  does  not 
yet  allow  teams  to  exercise  offensive  IO  weapons,  which  are 
still  shrouded  programs.  As  in  the  early  days  of  airpower, 
some  of  IO’s  most  stringent  critics  are  among  DOD’s  upcom¬ 
ing  senior  leadership.  Some  critics  even  walk  the  halls  of 
military  academia.  Lt  Gen  Douglas  D.  Buckholtz,  Joint  Staff 
director  for  Command,  Control,  Communications,  and  Com¬ 
puter  Systems  (J-6),  warns  that 

Awareness  [of  the  IW  threat)  Is  singularly  the  biggest  problem  we 
have.  We’ve  got  to  get  folks  up  to  speed  on  this.  .  .  .  The  problem  Is 
getting  war  fighters  to  really  understand  that  this  Is  every  bit  as 
significant  as  some  enemy  bomber  that  comes  In  and  does 
something  to  the  United  States.  It’s  just  that  they’ve  been  raised  on 
tanks  and  planes.  Getting  the  war  fighter  who  has  been  under  fire 
many  times  to  agree  that  networks  are  better  than  [weapons]  that 
shoot  Is  tough.  There’s  a  big  mind-set  you’ve  got  to  overcome.42 


Homs  of  the  Dilemma — What  to  Do? 

The  US  military  faces  a  conundrum.  On  one  hand,  the 
DOD  relies  heavily  on  technological  advances  in  the  IA  in 
response  to  defense  challenges  and  global  commitments  of 
the  twenty-first  century.  For  example,  the  DOD  leverages 
technology  to  offset  reductions  in  manpower.  On  the  other 
hand,  inherent  vulnerabilities  of  global  connectivity  could  be 
our  nemesis.  Is  this  dichotomy  incongruous?  Differences  can 
be  resolved  and  the  DOD  can  establish  a  foundation  firmer 
than  sand,  but  only  with  significant  resource  investment  and 
dedicated,  bold,  and  conscious  effort.  How?  Prudence  dic¬ 
tates  the  United  States  achieve  strong,  demonstrable  IO  de¬ 
terrence  soon.  Douhet  recognized  the  urgency  for  bold  action 
and  cautions  and  warned  that  “to  break  away  from  the  past 
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is  disturbing.  ...  If  we  have  a  tendency  to  deviate  as  little 
as  possible  from  the  beaten  path,  we  will  find  ourselves 
diverging  from  reality,  and  we  will  wind  up  far  removed 
from  the  realities  of  our  time.”43 


The  Key  Ingredient  to  a  Firm  Foundation 

Information  assurance  is  the  key  ingredient  to  credible 
IO  deterrence.  Information  assurance  is  the  certainty  of 
information  readiness,  reliability,  and  continuity.  It  pro¬ 
vides  that  firm  foundation  upon  which  we  can  base  Air 
Force  doctrine  with  some  realistic  expectations  of  success. 
We’ve  defined  it  and  recognized  its  importance.  Now,  what 
must  we  do  to  obtain  information  assurance?  The  steps 
described  below  focus  on  DOD  challenges.  However,  both 
DSB  and  PCCIP  reports  strongly  emphasize  that  most  of 
these  same  steps  must  be  mirrored  by  cooperative  efforts 
between  commercial  and  government  organizations  at  the 
local,  state,  and  national  levels. 


Constructing  a  Firm  Foundation 

Achieving  information  assurance  is  a  six-step  process. 
First,  the  DOD  must  secure  vital  information  systems  and 
then  convince  adversaries  that  these  systems  are,  in  fact, 
resilient.  Accomplishing  this  feat  involves  calculated  risk 
management:  identifying,  protecting,  and  making  robust 
only  those  information  systems  and  processes  most  critical 
to  national  defense.  This  approach  parallels  the  one  used  by 
the  Continuity  of  Government  operations  during  the  cold 
war.  The  DOD  should  identify  the  most  crucial  databases  the 
corruption  or  destruction  of  which  could  severely  impede 
military  operations.  It  should  be  noted  that  these  databases 
would  not  necessarily  be  classified  exclusively.  The  DOD 
should  then  either  maintain  duplicate  backup  systems  or 
increase  its  automated  defenses  for  these  systems.  Second, 
we  need  a  viable  indication  and  warning  (I&W)  capability  to 
anticipate,  preclude,  or  ameliorate  effects  of  IW  attacks.  This 
process  entails  developing  an  indication  and  warning  meth¬ 
odology  and  establishing  a  joint  24-hour  center  to  analyze 
information  and  warning  indicators,  publish  warnings,  coor- 
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dinate  data  on  attacks  in  progress,  assess  the  damage, 
and  monitor  efforts  to  reconstitute.  Geographically  focused 
emergency  response  teams  would  complete  the  I&W  capa¬ 
bility.  Third,  we  must  be  able  to  respond  to  an  information 
attack  in  kind  and  clearly  convey  to  adversaries  the  facts 
of  that  capability  and  our  willingness  to  apply  it. 

The  fourth  element  lies  with  the  American  judicial  sys¬ 
tem,  although  it  affects  daily  application  of  DOD  informa¬ 
tion  operations  policies  and  procedures.  Laws  must  be 
modified  to  reflect  offensive  and  defensive  aspects  of  the 
information  age,  and  procedures  must  be  streamlined  to 
expedite  data  sharing  among  DOD,  DOJ,  and  commercial 
organizations.  This  is  admittedly  a  difficult  area  to  negoti¬ 
ate  from  a  legal  perspective.  On  the  one  hand,  such  civil 
liberties  as  freedom  of  speech  and  even  freedom  of  assem¬ 
bly  are  intertwined  on  the  Internet  with  extremist  groups 
sharing  data  on  how  to  hack  computers  and  build  bombs. 
On  the  other  hand,  current  legal  restrictions  prohibit  look¬ 
ing  beyond  one  computer  hop  without  a  court  order.  These 
prohibitions  severely  curtail  DOD  investigative  agencies  in 
their  attempts  to  detect  who  is  waging  an  IW  attack.  Addi¬ 
tionally,  punishments  for  convicted  hackers  must  be  swift 
and  sufficiently  severe  to  deter.  Current  punishments  sim¬ 
ply  do  not  deter  nor  reflect  the  extent  of  resulting  damage. 
For  example,  in  1997  a  Swedish  hacker  jammed  911  lines 
in  Miami,  diverted  emergency  calls,  and  while  accessing 
the  public  telephone  system,  generated  60,000  unauthor¬ 
ized  calls.  The  penalty?  He  was  tried  in  Sweden  as  a  juve¬ 
nile  and  fined  $345.  It  should  be  noted  also  that  many 
countries  have  no  laws  whatsoever  pertaining  to  computer 
crime.44 

The  fifth  element  requires  changes  in  the  design  specifica¬ 
tions  for  ADP  systems.  The  United  States  must  stop  building 
systems  with  internal  weaknesses,  making  them  vulnerable 
to  malevolent  exploitation  and  manipulation.  Designing  more 
secure  systems  will  increase  the  end-cost,  but  having  them 
is  much  more  pragmatic  than  fixing  system  vulnerabilities 
later,  assuming  we  detect  them.  Granted,  some  of  the  above- 
mentioned  actions  are  difficult,  if  not  impossible,  to  accom¬ 
plish  with  today’s  technology.  Nonetheless,  these  shortfalls 
point  the  way  to  needed  R&D  investments.  Taken  together, 
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these  components  comprise  the  principle  of  deterrence  ap¬ 
plied  to  what  is  now  known  as  information  operations  or 
the  “the  fifth  battlespace  domain.” 

Sixth,  the  law  of  armed  conflict  should  be  thoroughly  re¬ 
viewed  in  the  international  arena  and  used  to  resolve  several 
basic  issues.  On  the  one  hand,  does  IW  constitute  an  act  of 
war?  Is  response  in  kind  considered  fair  play?  Should  the 
international  community  define  a  level  of  acceptable  damage 
generated  by  IW?  Should  it  outlaw  IW,  using  a  vehicle  simi¬ 
lar  to  the  Nuclear  Test  Ban  Treaty?  Considering  that  IO  is 
already  conducted  daily  and  that  IW  will  most  certainly  be 
conducted  in  war,  can  a  ban  realistically  push  Pandora  back 
into  her  box?  Would  such  an  approach  merely  handicap 
signatories  while  benefiting  adversaries  who  don’t  play  by  the 
rules?  On  the  other  hand,  should  the  United  States  even 
surface  such  questions  to  the  international  arena?  One  thing 
is  certain.  The  United  States  may  be  faced  with  an  adversary 
who  seeks  to  offset  our  advantages  by  using  asymmetric 
means  and  threatening  the  use  of  chemical  and/or  biological 
weapons,  information  attacks,  terrorism,  urban  warfare,  or 
anti-access  strategies.  Thus,  America  must  quickly  seize  the 
initiative  from  the  aggressor.  A  new  way  of  looking  at  conflict 
is  emerging.45 


Who’s  on  First?  What’s  on  Second? 

Like  supercharged  electrons,  organizations  throughout 
DOD  are  scrambling  for  IO-related  projects.  Projects,  con¬ 
tracts,  and  working  groups  proliferate  but  under  no  cen¬ 
tral  guidance  and  with  no  set  methodology  to  share  les¬ 
sons  learned.  The  skeptics  are  correct,  to  a  certain  extent. 
IO  is  the  political  emphasis  de  jour  because  funding  is 
available.  But,  the  threat  is  real  and  organizations  are 
reacting.  Figure  5  illustrates  the  plethora  of  organizational 
activity.  The  list  is  not  inclusive,  by  any  means. 

Headquarters  Air  Intelligence  Agency  (ALA)  is  the  parent 
organization  for  both  the  67th  Intelligence  Wing,  the  larg¬ 
est  IO  wing  in  the  Air  Force,  and  the  Air  Force  Information 
Warfare  Center  (AFIWC).  The  AFIWC  synthesizes  a  multi¬ 
tude  of  specialties  (such  as  engineers,  pilots,  intelligence 
operators,  and  scientists),  reflecting  the  diverse  nature  of 
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UNITS  WITH  10  FUNCTIONS  ...  TO  NAME  A  FEW! 


AFIWC 

LIWA 

JBC  JC2WC 

JCSE 

AIA 

JFWC 

ACOM  JCMA 

NIWA 

AFCERT  JWAC 

AF  IW  BATTLELAB 

NSA/IOTC  DISA 

Figure  5.  Who’s  On  First? 


IO.  AFIWC  is  parent  to  the  Air  Force  information  warfare 
battlelab  and  the  Air  Force  Computer  Emergency  Re¬ 
sponse  Team  (AFCERT).  Electronic  Systems  Division  (ESD) 
and  AFIWC  co-chair  an  IW  technology  planning  integration 
process  team.  The  609th  IW  Squadron,  subordinate  to 
Headquarters  Air  Combat  Command  (ACC),  assists  the 
commander  in  chief  of  ACC  in  both  offensive  and  defensive 
IO  missions.  The  newest  Air  Force  organization  is  the  Air 
and  Space  C2  Agency  at  Langley  Air  Force  Base.  The  Navy 
has  implemented  its  Navy  Information  Warfare  Activity 
(NIWA),  focusing  on  long-term  and  budgeted  affiliated  as¬ 
pects  of  IW,  and  its  Fleet  Information  Warfare  Center  to  pro¬ 
vide  current  IO  support  to  deployed  forces.  The  Army  most 
recently  initiated  its  Land  Information  Warfare  Agency 
(LIWA).  The  Defense  Intelligence  Agency  leads  the  effort  to 
develop  an  indication  and  warning  methodology  for  IW  and 
also  leads  an  interdepartmental  IW-threat  working  group. 
ESD’s  IW  Division  selects,  installs,  and  sustains  information- 
protecting  products.  AFCC  is  active  in  Air  Force-wide  infor¬ 
mation  protection  efforts  and  chairs  the  Air  Force  Command, 
Control,  Communications,  and  Computers  Panel.  AF/XOI 
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chairs  the  Information  Dominance  Panel.  Academia  and  de¬ 
fense  contractors  are  also  heavily  involved  in  10  initiatives. 

The  Joint  Staffs  Operations  Directorate  (J3)  and  Com¬ 
mand,  Control,  Communications,  and  Computer  Systems 
Directorate  (J6)  are  heavily  involved,  as  are  other  joint  or¬ 
ganizations.  The  Joint  Command  and  Control  Warfare  Cen¬ 
ter  (JCWC),  collocated  with  Headquarters  AIA  and  AFIWC, 
engages  in  a  plethora  of  10  activities  ranging  from  modeling 
and  simulation  to  assisting  theater  CINCs  in  planning  and 
executing  CW  and  EW  in  both  exercises  and  real-world  con¬ 
tingency  operations.  The  Joint  Communications  and  Secu¬ 
rity  Monitoring  Activity  (JCMA)  surveys  DOD  telecommuni¬ 
cations  and  automated  information  systems  to  identify 
vulnerabilities  and  then  recommend  countermeasures  and 
corrective  actions.  The  JCMA  also  supports  both  exercises 
and  real-world  operations.  The  Joint  Spectrum  Center  (JSC) 
ensures  effective  use  of  the  electromagnetic  spectrum  and  is 
the  DOD  focal  point  for  spectrum  supremacy  aspects  of  in¬ 
formation  warfare.  The  Joint  Warfare  Analysis  Center  pro¬ 
vides  the  joint  staff  and  unified  commands  with  effects- 
based,  precision-targeting  options  for  selected  networks  and 
nodes.  The  Joint  Battle  Center  provides  combatant  com¬ 
mands  at  the  joint  task  force  level  with  an  ability  to  experi¬ 
ment  with  and  assess  combat  applications  of  command,  con¬ 
trol,  communications,  computers,  intelligence,  surveillance, 
and  reconnaissance.  The  Joint  Communications  Support 
Element  provides  contingency  and  crisis  communications 
to  unified  commands,  services,  defense  agencies,  and  non- 
DOD  agencies  (for  example,  State  Department,  Federal 
Emergency  Management  Association,  North  Atlantic  Treaty 
Organization,  and  United  Nations).  The  Joint  Warfighting 
Center  assists  the  CJCS,  CINCs,  and  service  chiefs  in 
preparation  for  joint  and  multinational  operations  through 
conceptualization,  development,  and  assessment  of  current 
and  future  joint  doctrine,  and  application  in  training  and 
exercises.  Exemplifying  the  “who’s  on  first”  analogy, 
JCWC,  JCMA,  and  JSC  each  interfaces  separately  with 
supported  commanders  in  chief.  No  system  currently  exists 
to  generate  a  single,  integrated  product.46 

To  be  sure,  some  coordination  occurs  to  the  credit  of 
participating  organizations.  For  example,  the  Defense  Ad- 
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vanced  Research  Projects  Agency  (DARPA),  DISA,  and  NSA 
formed  a  “virtual’’  joint  technical  office  to  optimize  the  use 
of  limited  R&D  funds  and  expedite  delivery  of  info  protect 
technology,  among  other  goals.47  This  union  imaginatively 
capitalizes  on  three  related  but  distinct  focuses.  DARPA 
concentrates  on  long-term,  advanced  R&D  accomplished  in 
concert  with  partners  in  industry  and  academia.  DISA  is 
DOD’s  first  line  of  10  defense.  It  receives  inputs  from  ser¬ 
vice  computer  emergency  response  teams  (CERT)  to  identify 
current  problems,  researches  viruses,  and  attempts  com¬ 
puter  penetration  to  determine  weaknesses.  DISA  is  also 
parent  to  the  automated  systems  security  incident  support 
team  (ASSIST),  a  computerized  911  service  that  helps  to 
defend  against  attacks  and  distributes  warning  notices 
concerning  impending  threats  and  computer  vulnerabili¬ 
ties.  Finally,  NSA  is  the  focal  point  for  cryptography,  tele¬ 
communications  security,  classified  information  systems 
security,  and  related  R&D.  While  this  cooperation  pro¬ 
motes  internal  synergy,  it  does  not  characterize  efforts 
throughout  DOD.48 


“Cry  Havoc  and  Let  Loose  the  Dogs  of  War" 

Who  will  lead  the  10  charge?  Who’s  the  point  person  for 
investigating  IO  concepts  and  applications,  strategizing 
R&D  investment,  sharing  lessons  learned,  training  and 
equipping  for  information  operations?  Right  now,  no  one. 
This  is  a  significant  shortfall  at  the  joint  and  service  levels. 
How  should  we  organize  for  information  operations? 

Several  proposals  have  surfaced,  ranging  from  estab¬ 
lishing  an  IO  wing  subordinate  to  each  extant  numbered 
air  force  (NAF)  to  creating  a  global  IO  center  subordinate  to 
AF/XOI  and  comprised  of  the  Air  Intelligence  Agency’s  IO 
center,  AFIWC,  the  IW  battlelab,  and  functional  experts 
from  ACC,  Air  Mobility  Command,  Air  Force  Special  Opera¬ 
tions  Command,  and  Air  Force  Space  Command.  One  in¬ 
sightful  article  recognized  the  diversity  of  joint  efforts  and 
recommended  consolidation  of  joint  efforts  under  a  flag 
officer.49  The  National  Defense  Panel  suggested  giving  the 
IO  mission  to  SPACECOM  and  transferring  DISA  to  SPACE- 
COM  as  a  subordinate  command.  SPACECOM  would  man- 
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age  the  information  infrastructure  globally.50  Yet  another 
study  recommended  forming  a  DOD  organization  to  attain 
information  assurance,  suggesting  either  United  States  At¬ 
lantic  Command  (USACOM)  or  Strategic  Command  be 
given  this  responsibility.51  Some  consider  a  unified  com¬ 
mand  approach  to  information  operations  inappropriate, 
arguing  that  IO  is  not  a  unique  mission  as  are  special 
operations  and,  therefore,  does  not  need  to  be  concentrated 
with  a  single  CINC.  Furthermore,  IO  is  a  problem  endemic 
to  every  CINC,  whether  functional  or  geographic  in  orienta¬ 
tion.  Actually,  this  logic  supports  the  argument  for  charg¬ 
ing  one  unified  command  with  developing  IO  offensive  and 
defensive  capabilities.  This  consolidated  approach  enables 
other  CINCs  to  focus  on  primary  missions  and  precludes 
duplication  of  effort  as  each  struggles  to  resolve  similar 
problems.  Another  suggestion  would  be  to  detail  IO  as  an 
additional  duty  to  an  IO  officer,  paralleling  duties  of  the  Air 
Force  safety  officer  and  assigning  an  IO  officer  at  various 
organizational  levels.  This  approach,  however,  would  rele¬ 
gate  IO  to  a  support  backwater  and  dilute  DOD’s  ability  to 
rapidly  respond  to  attacks.  Additionally,  IO  is  a  complex 
field,  comprised  of  several  distinct  disciplines.  A  single  IO 
officer  can  not  be  adequately  fluent  in  all  areas. 


A  Numbered  Air  Force 

Yet  another  suggestion  was  to  transform  parts  of  the  Air 
Intelligence  Agency  into  a  numbered  air  force,  subordinate 
to  Air  Combat  Command.  This  is  actually  how  the  Air 
Force  Special  Operations  Command  evolved — first  an  NAF, 
then  subsequently  designated  a  major  command  with  the 
establishment  of  the  United  States  Special  Operations 
Command  (USSOCOM).  This  approach,  however,  sorely 
misses  the  mark.  An  NAF  lacks  sufficient  intensity  and 
thrust,  not  to  mention  a  four-star  IO  proponent,  to  effec¬ 
tively  consolidate  IO  initiatives  replete  throughout  the  Air 
Force  and  other  services,  as  well.  This  approach  also 
misses  the  mark  with  the  IO  NAF  subordinated  to  an  Air 
Force  MAJCOM  tasked  with  manning,  equipping,  and 
training,  as  opposed  to  as  an  IO  MAJCOM  itself,  subordi¬ 
nated  to  an  operationally  focused  IO  unified  command. 
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•  The  most  serious  shortcoming  to  the  NAF  proposal  is  that 
it  fails  to  capture  the  synergy  extant  in  developing  and  test¬ 
ing  IO  concepts  within  the  joint  realm.  IO  is  a  complex  state¬ 
ment  of  fact.  Due  to  its  many  and  varied  facets  (PSYOP, 
deception,  and  EW),  IO  development  and  testing  must  not  be 
restricted  to  a  service  environment,  only  to  be  introduced 
into  a  joint  task  force  in  a  moment  of  crisis.  A  successful  IO 
campaign  depends  on  early  and  thorough  joint  integration. 
Solving  this  dilemma  from  an  Air  Force-exclusive  perspec¬ 
tive — that  is,  the  IO  NAF — is  not  the  answer.  DOD  needs  an 
organizational  solution  at  a  much  higher  level  to  unite  the 
plethora  of  ongoing  IO  efforts  and  to  “let  loose  the  dogs  of 
war,”  thus  fiercely  tackling  the  IO  challenge  head-on. 

Unified  Command — the  Right  Level 

Centering  the  focus  at  the  unified  command  level  offers 
the  best  leverage  of  limited  resources.  The  issue  then  be¬ 
comes  whether  to  organize  geographically  or  functionally. 
At  first  glance,  geographical  organization  seems  most  ap¬ 
propriate.  Every  combatant  CINC  needs  to  attain  informa¬ 
tion  superiority.  This  approach  allocates  to  each  service 
the  responsibility  for  IO  training  and  equipping,  and  to 
each  combatant  CINC  responsibility  for  IO  planning  and 
execution.  A  geographical  orientation,  however,  places  IO- 
related  resource  requirements  in  direct  conflict  with  all 
other  weapon  systems  and  training  requirements  that 
compete  for  finite  funds.  It  also  allows  each  CINC  to  inde¬ 
pendently  pursue  avenues  of  info  protect/info  attack,  fos¬ 
ters  duplication  of  effort,  and  complicates  the  process  of 
sharing  lessons  learned.  The  geographical  approach  ech¬ 
oes  early  calls  to  divide  air  forces,  and  subordinates  them 
to  individual  ground  components. 

Functional  Unified  Command — 
the  Right  Focus 

Organizing  IO  functionally  at  the  unified  command  level 
capitalizes  on  three  long-held  military  principles.  The  first, 
unity  of  command  “ensures  the  concentration  of  effort  for 
every  objective  under  one  responsible  commander.  ...  All 
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efforts  should  be  directed  and  coordinated  toward  a  com¬ 
mon  objective  ...  to  gain  most  efficient  application.”52  This 
is  especially  critical  today  when  organizations  throughout 
DOD  are  recognizing  the  vulnerability  inherent  in  informa¬ 
tion  infrastructures.  Working  groups  and  R&D  efforts  pro¬ 
liferate,  due  in  large  part  to  funds  associated  with  IO  ef¬ 
forts.  Efforts  are,  to  a  large  degree,  uncoordinated  among 
organizations  and  unevenly  focused  across  the  defensive 
and  offensive  facets  of  IO.  Both  time  and  funds  are  finite; 
they  must  be  applied  with  concentrated  intensity  and 
coordinated  among  potential  users.  Vice  Adm  Arthur  K. 
Cebrowski,  the  Navy’s  director  of  space  and  electronic  war¬ 
fare,  agrees  with  this  approach  and  likens  it  to  nuclear 
warfare.  As  he  puts  it,  “We  created  an  environment  in 
which  the  various  disciplines  that  contribute  to  nuclear 
warfare  could  come  together  and  be  managed  as  a  mass 
rather  than  as  a  collection  of  career  stovepipes.  We  need  to 
do  similar  work  with  information  technology.”53 

The  second  principle,  that  of  mass,  “focuses  combat  power 
at  a  decisive  time  and  place.  .  .  .  Mass  is  an  effect  that  air 
and  space  forces  achieve  through  efficiency  of  attack.”54 
Functional  organization  under  a  single  CINC  allows  focused 
identification  of  IO  objectives  for  training,  equipping,  and 
R&D  to  fashion  tools  for  info  protect  and  info  attack.  It  would 
also  generate  synergy  and  expedite  IO-related  advances  by 
sharing  lessons  learned  among  projects.  The  third  principle, 
economy  of  force,  “selects  the  best  mix  of  combat  power.  To 
ensure  overwhelming  combat  power  is  available,  minimal 
combat  power  should  be  devoted  to  secondary  objectives.”55 
IO  projects  competing  for  funds  can  be  systematically  priori¬ 
tized,  weak  points  identified,  and  funds  effectively  allocated. 
This  also  capitalizes  on  resident  IO  expertise.  Individuals  well 
versed  in  IO  tactics  will  be  able  to  recommend  the  most 
effective  mix  of  IO  assets  for  applications  in  military  opera¬ 
tions  other  than  war  or  crisis  situations. 


STRATCOM:  The  Appropriate  Model? 

This  new  IO  command  might  extrapolate  elements  of 
STRATCOM  in  planning  and  executing  strategic  IW  opera¬ 
tions.  The  destructive  potential  of  strategic  IW  has  often 
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been  compared  to  that  of  weapons  of  mass  destruction. 
Analysts  argue  that  this  similarity  necessitates  centralized 
planning,  control,  and  execution.  Indeed,  joint  doctrine 
currently  stipulates  that  IW  execution  must  first  be  ap¬ 
proved  by  the  national  command  authorities  (NCA).  The 
analogy  continues  that  this  unified  command,  charged 
with  centralized  10  strategic  planning,  would  have  a  coun¬ 
terpart  to  the  joint  strategic  target  planning  staff  to  de¬ 
velop  the  single  integrated  information-warfare  operating 
plan  that  could  be  expeditiously  executed  upon  NCA  direc¬ 
tion.  When  asked  if  IO  should  be  treated  in  the  same 
manner  as  nuclear  weapons,  Admiral  Cebrowski  agreed, 
"Yes,  yes.  .  .  .  We  created  an  environment  in  which  the 
various  disciplines  which  contribute  to  nuclear  warfare 
could  come  together  and  be  managed  as  a  mass  rather 
than  as  a  collection  of  career  stovepipes.  We  need  to  do 
similar  work  with  information  technology.”56 

Consider,  however,  the  legacy  of  Strategic  Air  Com¬ 
mand.  The  United  States  invested  significant  resources 
to  establish  an  organization  that  never,  thankfully, 
launched  a  nuclear  weapon,  strategic  or  tactical.  Should 
the  United  States  categorize  IW  in  this  same  restrictive 
manner,  as  a  weapon  never  to  be  used?  The  better  objec¬ 
tive  is  to  devise  a  strategy  that  allows  employment  of  a 
wide  range  of  IO  options  rather  than  an  approach  that 
precludes  their  application.  Strategists  and  targeteers,  for 
example,  should  consider  the  following  when  identifying 
IW  targets:  If  the  United  States  would  not  employ  conven¬ 
tional  weapons  against  a  specific  target — for  example, 
bomb  an  adversary’s  stock  market — then  applying  IW 
against  that  same  target  is  also  probably  inappropriate. 
Thus,  while  STRATCOM  is  a  logical  thought,  the  nuclear 
analogy  is  a  non  sequitur. 


Special  Operations  Command 
Is  a  Much  Better  Fit 

SOCOM  is  a  better  model,  offering  an  excellent  balance  of 
centralized  control  of  strategic  planning,  budgeting,  research 
and  development,  developing  IO  applications,  and  sharing 
lessons  learned  across  the  services,  with  decentralized  plan- 
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ning  and  execution  by  the  combatant  CINCs.  Capitalizing 
on  SOCOM’s  technique,  the  10  command  would  collocate 
IO  teams  with  supported  CINCs  to  assist  the  Joint  Task 
Force  as  it  plans  and  executes  theater-level  10  options.  An 
IO  command  also  offers  the  advantage  of  fully  concentrat¬ 
ing  on  IO  challenges  of  the  twenty-first  century. 


CINC  IO:  SPACECOM,  STRATCOM,  ACOM? 

Assigning  the  IO  mission  to  an  existing  unified  com¬ 
mand  is  a  necessity,  given  constrained  DOD  resources. 
The  question  is  which  CINC?  SPACECOM  is  initially  ap¬ 
pealing  considering  the  magnitude  of  battle-related  infor¬ 
mation  transmitted  through  space  and  the  growing  de¬ 
pendence  on  space-based  assets.  However,  the  two  most 
crucial  areas  in  the  coming  decade  warranting  concerted 
attention  are  IO  and  space.  Assigning  the  IO  mission  to 
SPACECOM  would,  by  definition,  dilute  the  IO  focus  due 
to  competing  challenges  and  existing  missions  of  that  uni¬ 
fied  command.  For  this  reason,  SPACECOM  is  the  most 
inappropriate  extant  command  to  be  dual-hatted  as  “CINC 
IO.”  Dual-hatting  space  and  IO  would  detract  from  both 
missions  at  a  crucial  point  in  the  evolution  of  each.  At  first 
glance,  STRATCOM  could  vie  as  a  potential  candidate  for 
CINC  IO,  especially  considering  the  ostensibly  strong  par¬ 
allels  in  destructive  potential  between  information  warfare 
and  nuclear  attacks.  However,  STRATCOM’s  nuclear  mis¬ 
sion  is  critical,  allowing  no  margin  for  error.  Assigning 
information  operations  here  would  either  dilute  attention 
from  its  primary  nuclear  mission  or  result  in  half-hearted 
development  of  IO  concepts,  applications,  and  offensive 
and  defensive  measures. 


And  the  Winner  for  “CINC  IO”  Is— 

The  Atlantic  Command  (ACOM)  is,  without  a  doubt,  the 
best  repository  for  the  critical  IO  mission.  A  major  thrust 
of  ACOM’s  mission  is  training  and  integrating  members  of 
the  Army,  Air  Force,  Navy,  and  Marine  Corps  to  work  to¬ 
gether  as  one  team.  Joint  service  interoperability  is  critical 
to  war  fighting  now  and  into  the  twenty-first  century. 
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Rather  than  focusing  on  one  specific  service,  combatant 
commanders  are  now  capabilities-centered,  which  often  re¬ 
quires  a  blending  of  the  unique  skills  and  capabilities  indi¬ 
vidual  services  have  to  offer.  Accordingly,  ACOM  refocused 
its  efforts  from  primarily  a  maritime  command  to  become 
the  premier  joint  trainer,  force  integrator,  and  deployer  of 
CONUS-based  land,  maritime,  and  air  force  troops  to  US 
war-fighting  commanders  in  chief.  Today,  ACOM  inte¬ 
grates  the  military  capabilities  of  nearly  all  of  the  forces 
based  in  the  continental  United  States  through  its  compo¬ 
nents:  the  Air  Force’s  Air  Combat  Command,  the  Army's 
Forces  Command,  the  Marine  Corps’s  Marine  Forces  At¬ 
lantic,  and  the  Navy’s  Atlantic  Fleet. 


ACOM'S  Evolving  Mission 

Additionally,  ACOM’s  mission  is  evolving.  The  defense 
reform  initiative  recently  announced  by  the  secretary  of 
defense  will  realign  the  following  five  joint  activities  to 
USACOM  effective  1  October  1998:  Joint  Warfighting  Cen¬ 
ter,  Joint  Communications  Support  Element,  Joint  Com¬ 
mand  and  Control  Warfare  Center  (JC^C),  Joint  Battle 
Center,  and  the  Joint  Warfighting  Analysis  Center.  Other 
joint  organizations  are  being  considered  as  well.  The  syn¬ 
ergy  is  real,  it's  happening,  and  the  operational  potential 
is,  well,  exciting!  This  realignment  will  streamline  the  joint 
staff  by  divesting  operational  functions  and  organizations 
to  ACOM,  thus  enabling  the  joint  staff  to  better  concen¬ 
trate  on  its  primary  role  of  formulating  policy  and  guid¬ 
ance.  The  realignment  will  also  strengthen  USACOM’s  role 
in  joint  functional  training  and  improve  joint  force  integra¬ 
tion,  particularly  in  the  evolution  of  advanced  joint  tactics, 
techniques,  procedures,  and  equipment.  Incorporating 
these  organizations  into  USACOM  yields  the  opportunity 
to  regularly  develop,  test,  evaluate,  and  integrate  IO  tech¬ 
niques  within  the  joint  arena. 

Once  integrated,  USACOM  holds  the  potential  for  es¬ 
tablishing  a  sorely  needed  joint  task  force  for  IO  that  is 
responsive  to  combatant  CINCs.57  No  longer  would  an  in¬ 
formation  protect  crisis  team  be  formed  out  of  necessity  at 
the  joint  staff.  As  CINC  IO,  Atlantic  Command  would  also 
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be  the  designated  DOD  representative  at  the  national  level 
in  coordinating  the  defense  of  the  civilian  infrastructure, 
critical  to  successful  execution  of  military  operations.  In 
sum,  USACOM  could  propel  the  DOD  towards  both  resolv¬ 
ing  defensive  vulnerabilities  and  developing  offensive 
skills,  all  the  while  providing  the  perfect  opportunity  to 
“train  in  peace  as  you  would  fight  in  war.”  The  end  result 
will  be  vastly  improved  services  to  war-fighting  CINCs. 
ACOM  leaders  must  recognize  the  timing  and  seize  the 
opportunity,  despite  the  dearth  of  national-level  guidance. 
Courageous  leaders  astutely  recognize  the  subtle  benefit 
extant  in  a  lack  of  guidance  and,  within  that  vacuum,  have 
pressed  hard  to  forge  great  programs.  Will  ACOM  be  up  to 
the  challenge?58 


Conclusion 

This  paper  represented  a  lengthy  but  important  jour¬ 
ney,  spanning  thousands  of  years  from  Sun  Tzu  to  the 
information  age  (fig.  6).  That  information  has  always 
been  a  valuable  commodity  is  unquestioned.  What  have 
changed  are  the  amount,  speed,  and  methods  by  which 
information  is  transmitted  and  received.  Technologically 
advanced  democratic  societies  are  most  dependent  on 
the  availability  of  information;  therefore,  they  are  also 
the  most  vulnerable  to  the  interruption,  corruption,  or 
manipulation  of  that  data  flow.  A  host  of  potential  an- 


Figure  6.  From  Sun  Tzu  to  the  Information  Age 
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tagonists  have  noted  this  weakness,  and  several  of  them 
already  skillfully  wage  and  win  information  wars  against 
the  United  States.  We  can  expect  these  attacks  to  increase 
in  number  and  severity  due  to  our  susceptibility  and  the 
ease  and  low  risk  associated  with  such  attacks. 


Any  Progress  Made?  Somewhat 

Has  DOD  stepped  up  to  the  plate?  Somewhat.  Secretary 
of  Defense  Dick  Chaney  announced  the  bold  proposal  to 
establish  the  IO  position  within  ASD/C3I.  The  Joint  Staff 
is  realigning  staff  as  opposed  to  operational  missions. 
ACOM  is  poised  and  full  of  potential  to  make  headway  on 
these  pressing  IO  issues.  Agencies  throughout  the  Air 
Force  and  other  services  are  scrambling  for  IO-related 
projects.  The  good  news:  We  are  shoring  up  our  defenses, 
slowly.  The  bad  news:  Many  senior  leaders  doubt  the  effi¬ 
cacy  of  IO  and  demonstrate  great  difficulty  in  breaking  the 
paradigm  of  industrial-level  war.  These  individuals  impede 
the  transition  of  funds  from  the  kinetic  force  to  prepare  for 
wars  of  the  twenty-first  century.  Furthermore,  the  DOD  is 
still  caught  in  a  bureaucratic  quagmire  of  IO  terminology, 
which  impedes  substantive  headway  due  to  a  war  of 
words.  We  must  get  beyond  this  stalemate.  While  we  dis¬ 
sect  written  nuances  by  way  of  staff  summary  sheets, 
such  countries  as  Russia  and  China  are  actively  develop¬ 
ing  IW  tools,  to  say  nothing  of  the  nonnation  state  adver¬ 
saries. 


So  What’s  the  Answer?  And  Is  It  Feasible? 

What  is  the  proposed  solution?  How  can  we  get  there? 
What  should  be  the  lineup  of  extant  unified  commands? 
First,  looking  five  years  hence,  ACOM  will  be  the  undisputed 
center  of  gravity  for  IO  and  will  be  giving  decisive,  step-out 
leadership.  The  name  will  be  America  Command  (AMCOM), 
amended  to  reflect  its  primary  mission:  the  defense  of  the  US 
homeland.  In  this  respect,  AMCOM  will  have  a  geographic 
focus  much  like  Europe  Command  for  the  European  region 
and  Pacific  Command  for  the  Pacific  region.  Second,  in  addi¬ 
tion  to  elements  divested  from  the  Joint  Staff,  other  elements 
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should  also  be  resubordinated  to  this  command,  specifi¬ 
cally  JCMA,  JSC,  appropriate  elements  of  JCS/J3/J6,  and 
information  operations  elements  within  DISA  (fig.  7). 


Figure  7.  Objective  Structure  for  10  Unified  Command 


Objective  Structure  for 
IO  Unified  Command 

Following  the  SOCOM  model,  AMCOM  will  collocate  one 
team  with  each  combatant  CINC  to  interface  with  the  thea¬ 
ter  IW  cell.  This  team  will  integrate  services  currently  pro¬ 
vided  by  JCWC,  JCMA,  and  JSC.  JOWC  teams  already 
interface  closely  with  combatant  CINCs.  They  provide  a 
ready-made  nucleus  for  an  10  joint  task  force,  which 
would  work  for  CINC  AMCOM  but  will  deploy  to  and  be 
operationally  controlled  by  supported  CINCs,  upon  direc¬ 
tion  by  the  National  Command  Authorities. 

Another  element  of  AMCOM,  the  Joint  Information  War¬ 
fare  Center  (JIWC)  will  alleviate  a  significant  shortfall  rec¬ 
ognized  by  national-level  studies.  JIWC  will  provide  a  cen¬ 
tralized  joint  organization  to  monitor  the  health  of  the 
DOD  automated  infrastructure,  warn  of  impending  attack, 
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respond  effectively  to  minimize  and  assess  damage,  and 
initiate  efforts  to  reconstitute.  Located  at  Kelly  AFB,  the 
JIWC  will  capitalize  on  the  expertise  of  the  collocated  IO 
units  (JC^VC,  Headquarters  AIA,  AFIWC,  AFCERT,  and  IW 
battlelab).  JIWC  will  include  liaison  officers  from  service 
components  IO  agencies  (for  example.  Air  Force  AFIWC, 
Army  LIWA,  and  Navy  NIWA)  and  representatives  of  such 
national-level  agencies  as  the  FBI  and  NSA’s  Information 
Operations  Technical  Center.  Service  CERT  will  report  pos¬ 
sible  IO-related  discrepancies  to  a  joint  ASSIST  agency, 
which  would  also  interface  with  the  JIWC. 

The  Air  Force  must  restructure  to  centralize  and 
streamline  IO  operations.  Headquarters  AIA  would  become 
the  Air  Force’s  IO  MAJCOM,  serving  as  the  Air  Force  com¬ 
ponent  to  the  IO  unified  command.  This  migration  would 
necessitate  AIA  severing  its  organizational  ties  to  the  Air 
Staff,  as  it  currently  exists  in  ALA's  status  as  a  forward 
operating  agency  (FOA).  This  change  parallels  the  ongoing 
restructure  of  the  Joint  Staff  and  would  likewise  allow 
AF/XO  to  concentrate  on  policy  and  guidance  issues,  as 
opposed  to  IO  operational  support  to  combatant  CINCs. 
AIA,  as  an  IO  MAJCOM,  must  sharpen  its  IO  focus  by 
divesting  functions  supporting  the  Air  Staff.  It  can  accom¬ 
plish  this  end  by  transforming  the  Washington,  D.C.- 
based  497th  Intelligence  Group  into  a  separate  FOA,  which 
reports  to  Headquarters  AF/XO,  and  augmenting  it  with 
necessary  manpower.  The  609th  Intelligence  Squadron 
should  be  disbanded  because  of  capabilities  resident  in  AIA 
or  resubordinated  from  ACC  to  AFIWC.  This  will  eliminate 
redundancy  and  detrimental  competition  with  other  Air 
Force  IO  elements.  The  AFCC  and  the  Air  Force  Weather 
Agency,  two  other  significant  IO-related  organizations, 
should  be  incorporated  into  this  Air  Force  IO  MAJCOM.  AIA's 
relationship  to  AMCOM  will  then  parallel  AFSOC,  with  heavy 
emphasis  on  supporting  combatant  CINCs. 

Atlantic  Command  should  be  allocated  its  own  program 
element  (PE),  paralleling  SOCOM’s  Major  Force  Program 
11.  This  allocation  will  alleviate  a  major  criticism  uni¬ 
formly  specified  by  PCCIP,  DSB,  and  NDP  regarding  insuf¬ 
ficient,  sporadic,  and  uncoordinated  IO  expenditures.  Es¬ 
tablishing  an  IOCOM  program  element  will  also  resolve  the 
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impediment  of  convincing  the  conventionally  focused  mili¬ 
tary  establishment  to  shift  kinetic  funds  to  10  initiatives,  a 
problem  experienced  by  special  forces.  Preparing  an  ade¬ 
quate  IW  defense  will  require  a  fundamental  reallocation  of 
resources.  AMCOM  could  seriously  concentrate  R&D 
funds  to  eliminate  such  current  and  very  fundamental 
shortfalls  as  real-time  detection,  identification,  and  re¬ 
sponse  to  an  information  attack.  Additional  R&D  effort 
must  be  focused  to  rapidly  identify  damage  and  reconsti¬ 
tute.  While  DOD  is  capitalizing  on  commercial  research 
and  development,  unexplored  but  militarily  relevant  areas 
exist  that  are  either  too  speculative  or  not  applicable  for 
commercial  investment.  AMCOM  could  spur  investment  in 
these  areas.  Other  benefits  resulting  from  centralized 
budget  management  and  execution  include  methodical 
dissemination  of  lessons  learned,  coordination  of  contracts 
to  maximize  resource  investment,  oversight  to  ensure  that 
security  is  a  prerequisite  in  future  system  design,  and 
focused  attention  on  training  and  retention  of  IO  specialists. 
AMCOM  will  also  comprise  a  single  and  effective  interface 
with  government  and  commercial  organizations  that  work 
towards  the  common  goal  of  information  assurance. 

Caper  Diem! 

If  DOD  sustains  bureaucratic  inertia  despite  the  plethora 
of  information  warfare  attacks  and  insightful  predictions  of 
IW  attacks  to  come,  if  DOD  fails  to  seize  the  momentum 
offered  by  establishing  AMCOM,  then  shame  on  us.  As  an 
alternative,  the  Department  of  Defense  could  astutely  give 
AMCOM  the  IO  lead.  AMCOM  could  unabashedly  forge 
scarce  resources  and  joint  expertise  into  a  concentrated  pur¬ 
suit  of  information  assurance  and  offensive  IW  applications. 
The  result  is  credible  IO  deterrence,  which  will  enable  senior 
DOD  leaders  to  build  their  castles —  our  national  security 
policy — on  a  foundation  much  firmer  than  sand.  This  pro¬ 
posed  solution  is  definitely  attainable. 

It  seems  fitting  to  close  with  an  insightful  observation 
from  Douhet. 

Victory  smiles  upon  those  who  anticipate  the  changes  in  the 
character  of  war,  not  upon  those  who  wait  to  adapt  themselves 
after  the  changes  occur.  .  .  .  Those  nations  who  are  caught 
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unprepared  for  the  coming  war  will  find,  when  war  breaks  out,  not 
only  that  It  Is  too  late  for  them  to  get  ready  for  It,  but  that  they 
cannot  even  get  the  drift  of  it.59 
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Navy  Information  Warfare  Activity 

NDP 

National  Defense  Panel 

PCCIP 

President’s  Commission  on  Critical 
Infrastructure  Protection 

PE 

Program  element 

PSYOP 

Psychological  operations 

RMA 

Revolution  in  military  affairs 

SOC 

Special  Operations  Command 

USACOM 

United  States  Atlantic  Command 

USAF 

United  States  Air  Force 
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